Description
The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.
Remediation
References
Related Vulnerabilities
WordPress Plugin vSlider Multi Image Slider for WordPress Arbitrary File Upload (4.1.2)
WordPress Plugin Conditional Marketing Mailer for WooCommerce Unspecified Vulnerability (1.6)
WordPress Plugin Contact Form Unspecified Vulnerability (1.1.9)
Liferay Portal Observable Discrepancy Vulnerability (CVE-2024-26268)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)