Description Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk. Remediation References CVE-2022-2986 Related Vulnerabilities Ruby Improper Input Validation Vulnerability (CVE-2011-2705) MySQL Resource Management Errors Vulnerability (CVE-2010-3837) WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.14) SugarCRM Other Vulnerability (CVE-2009-2146) WordPress Plugin Google Maps by BestWebSoft Cross-Site Scripting (1.3.5) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2022-2986