CVE-2017-2641: Moodle SQL injection via user preferences – CVSS 9.8 · Watchpost