Description
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
Remediation
References
Related Vulnerabilities
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (1.2.32)
WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)
WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.2.13)
MySQL CVE-2020-14619 Vulnerability (CVE-2020-14619)
WordPress Plugin wp superb Slideshow 'upload.php' Arbitrary File Upload (2.2)