CVE-2013-4341

This Metasploit module exploits an authenticated RCE vulnerability in Moodle by manipulating the spellchecker path to execute arbitrary commands. It also leverages a secondary XSS vulnerability to escalate privileges if needed.

This exploit demonstrates a persistent XSS vulnerability in Moodle versions <= 2.3.8 and 2.4.5. The vulnerability allows an attacker to inject malicious JavaScript via the RSS feed link parameter, which executes when a user clicks the 'Link to original blog entry' link.