4 matches found
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page.
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses.