The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-89,
Products Affected