mirror of
https://github.com/moodle/moodle.git
synced 2025-03-24 01:20:27 +01:00
1/ potential sql injection through tag types - missing param type + can add new types + usually no addslashes before update of tags 2/ paging does not work at all 3/ missing param type definitions 4/ not xhtml strict compliant 5/ CSRF - missing sesskey checks 6/ UI code in tag/lib.php - should be in manage.php or other file 7/ missing localization of types - default/standard