XSS in Moodle Blog RSS Feed

This repository contains a single Metasploit module: 'moodle_spelling_binary_rce.rb', which exploits a remote code execution vulnerability in Moodle (CVE-2013-3630). The exploit targets the spellchecker configuration, allowing an authenticated user to set the aspell binary path to an arbitrary command, which is then executed by the application. The module also references an XSS vulnerability (CVE-2013-4341) that can be used to escalate privileges by stealing an admin session key. The exploit requires valid credentials for a Moodle user and can be used to gain a shell or execute arbitrary commands on the server. The code is written in Ruby and is structured as a standard Metasploit exploit module, with options for username, password, session key, and target URI. The main attack vector is network-based, targeting HTTP endpoints on the Moodle server. The module is operational and provides a working exploit with customizable payloads.