CVE-2020-36633

A vulnerability was found in moodle-blocksitenews 1.0. It has been classified as problematic. This affects the function getcontent of the file blocksitenews.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.1 is able ...

CVE-2020-36633

Summary: CVE-2020-36633 affects moodle-block_sitenews version 1.0, specifically the get_content function in block_sitenews.php. The issue enables cross-site request forgery (CSRF) and can be triggered remotely. The vulnerability is addressed by upgrading to version 1.1, with the patch identified ...