Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4298)

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

Remediation

References

CVE-2011-4298

Related Vulnerabilities

WordPress Plugin TheCartPress eCommerce Shopping Cart Multiple Vulnerabilities (1.3.9)

WordPress Plugin Quick Event Manager Security Bypass (9.2.16)

WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.2)

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.32)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.11.1)

Severity

Medium

Classification

CVE-2011-4298 CWE-352