Vulnerabilities in the Moodle learning management system allow a hacker to gain access to the authentication data of arbitrary users

The multiple vulnerabilities of the Moodle learning management system’s module for lessons are related to the manipulation of cross-site requests. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users throu...