CVE-2020-36633

Summary: CVE-2020-36633 affects moodle-block_sitenews version 1.0, specifically the get_content function in block_sitenews.php. The issue enables cross-site request forgery (CSRF) and can be triggered remotely. The vulnerability is addressed by upgrading to version 1.1, with the patch identified ...