Description
Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check Permissions page.
Remediation
References
Related Vulnerabilities
WordPress Plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross-Site Scripting (3.2.12)
WordPress Plugin Attachment Manager Arbitrary File Upload (2.1.1)
WordPress Plugin Shortcode Ninja Cross-Site Scripting (1.4)
WordPress Plugin Calendar Cross-Site Request Forgery (1.3.2)
WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.25)