Description In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services. Remediation References CVE-2016-8643 Related Vulnerabilities WordPress Plugin Download Manager Cross-Site Scripting (3.2.46) Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0422) WordPress Plugin DeMomentSomTres Subscribe Cross-Site Scripting (201909190900) Joomla! Core 1.5.x Variable Injection (1.5.0 - 1.5.6) Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.15) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-284 CVE-2016-8643