Description In Moodle 3.x, glossary search displays entries without checking user permissions to view them. Remediation References CVE-2016-5012 Related Vulnerabilities WordPress Plugin WP e-Commerce-Clockwork SMS Cross-Site Scripting (2.0.5) MySQL CVE-2023-22066 Vulnerability (CVE-2023-22066) Plone CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-7939) WordPress Plugin CSS Hero Cross-Site Scripting (4.03) WordPress Plugin Responsive Poll Security Bypass (1.3.4) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-200 CVE-2016-5012