Description
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
Remediation
References
Related Vulnerabilities
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (4.1.9)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (9.0)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-0362)
Drupal Core 9.2.x Cross-Site Scripting (9.2.0 - 9.2.8)
WordPress Plugin RokMicroNews Multiple Vulnerabilities (1.5)