https://advisories.gitlab.com/composer/moodle/moodle/CVE-2025-53021/
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter |...
CVE-2025-53021 Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter: A session fixation vulnerability in Moodle 3.x...
session fixation
https://advisories.gitlab.com/composer/moodle/moodle/CVE-2024-38276/
Moodle CSRF risks due to misuse of confirm_sesskey | GitLab Advisory Database (GLAD)
CVE-2024-38276 Moodle CSRF risks due to misuse of confirm_sesskey: Incorrect CSRF token checks resulted in multiple CSRF risks.