Description Moodle before 2.2.2 has users' private files included in course backups Remediation References CVE-2012-1156 Related Vulnerabilities WordPress Plugin WordPress Landing Pages Remote Code Execution (1.9.0) WordPress Plugin Live Search for WooCommerce Security Bypass (2.0.2) Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5504) WordPress Plugin Hostel Cross-Site Scripting (1.1.3) Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-532 CVE-2012-1156