Description
Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL.
Remediation
References
Related Vulnerabilities
WordPress Plugin Shopping Cart & eCommerce Store Information Disclosure (2.0.5)
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)
PHP Other Vulnerability (CVE-2007-1835)
SharePoint CVE-2022-41037 Vulnerability (CVE-2022-41037)
WordPress Plugin Order Export & Order Import for WooCommerce Information Disclosure (1.0.8)