Description
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
Remediation
References
Related Vulnerabilities
Python Improper Input Validation Vulnerability (CVE-2025-13462)
MySQL CVE-2016-3424 Vulnerability (CVE-2016-3424)
WebLogic CVE-2020-2966 Vulnerability (CVE-2020-2966)
WordPress Plugin AnyMind Widget Cross-Site Request Forgery (1.1)
WordPress Plugin Store Locator Plus for WordPress Privilege Escalation (5.5.14)