Description
Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Popular Posts TimThumb Arbitrary File Upload (2.1.4)
WordPress Plugin HubSpot All-In-One Marketing-Forms, Popups, Live Chat Cross-Site Scripting (7.5.5)
WordPress Plugin Awesome Support-WordPress HelpDesk & Support Cross-Site Scripting (5.8.0)
WordPress Plugin You Shang Cross-Site Scripting (1.0.1)
IBM WebSEAL Incorrect Default Permissions Vulnerability (CVE-2024-35139)