Description
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Sharing Toolkit Cross-Site Scripting (2.1.1)
Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2922)
Jenkins Other Vulnerability (CVE-2021-21697)
WordPress Plugin Paytm-Donation SQL Injection (1.3.2)
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (6.1.5)