Description
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
Remediation
References
Related Vulnerabilities
SharePoint Out-of-bounds Read Vulnerability (CVE-2025-59235)
Pega Infinity Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-35656)
WordPress Plugin Translate WordPress with GTranslate Cross-Site Scripting (2.8.51)
MySQL CVE-2013-0368 Vulnerability (CVE-2013-0368)
WordPress Plugin Quotes and Tips by BestWebSoft Cross-Site Scripting (1.32)