Description
A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
Remediation
References
Related Vulnerabilities
PrestaShop CVE-2023-39529 Vulnerability (CVE-2023-39529)
WordPress Plugin open-flash-chart-core Remote Code Execution (0.4)
Jboss EAP CVE-2025-23367 Vulnerability (CVE-2025-23367)
WordPress Plugin OMGF-Host Google Fonts Locally Multiple Vulnerabilities (4.5.3)
WordPress Plugin Custom 404 Pro Unspecified Vulnerability (3.7.0)