Description
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
Remediation
References
Related Vulnerabilities
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.9)
WordPress Plugin WP Table Builder-WordPress Table Cross-Site Scripting (1.4.6)
WordPress Plugin Gravity Forms Cross-Site Scripting (1.9.5)
phpMyAdmin Other Vulnerability (CVE-2004-2631)
XWiki Incorrect Authorization Vulnerability (CVE-2022-23615)