Description Authenticated users were able to enumerate other users' names via the learning plans page. Remediation References CVE-2023-28334 Related Vulnerabilities phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-6619) WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Request Forgery (1.9.18) Chamilo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-39061) WordPress Plugin WP Customer Reviews Multiple Vulnerabilities (3.0.8) Oracle Database Server CVE-2007-0273 Vulnerability (CVE-2007-0273) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-639 CVE-2023-28334