Description
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.
Remediation
References
Related Vulnerabilities
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36099)
Oracle Database Server CVE-2021-2332 Vulnerability (CVE-2021-2332)
MySQL CVE-2016-0653 Vulnerability (CVE-2016-0653)
WordPress Plugin WP eCommerce Multiple Vulnerabilities (3.8.9.5)
WordPress Plugin WooCommerce Export Orders and More Cross-Site Scripting (2.0.10)