Description
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.
Remediation
References
Related Vulnerabilities
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-14540)
SharePoint CVE-2021-24072 Vulnerability (CVE-2021-24072)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-1133)
WordPress Plugin Design Approval System Cross-Site Scripting (3.6)
WordPress Plugin YITH Maintenance Mode Multiple Cross-Site Scripting Vulnerabilities (1.3.8)