Cross Site Request Forgery (CSRF)

moodle/moodle is vulnerable to Cross Site Request Forgery. The vulnerability is due to misuse of confirmsesskey. An attacker can exploit this flaw to perform unauthorized actions on behalf of a legitimate user...