Description
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.
Remediation
References
Related Vulnerabilities
WordPress Plugin YITH WooCommerce Mailchimp Security Bypass (2.1.3)
osTicket Other Vulnerability (CVE-2006-5407)
WordPress Plugin Xhanch-My Twitter Cross-Site Request Forgery (2.7.6)
WordPress Plugin Exit Popups & Onsite Retargeting by OptiMonk Cross-Site Scripting (1.2.5)
WordPress Plugin EZ Google Analytics Cross-Site Scripting (4.1.06)