The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors.Referenceshttps://www.drupal.org/node/2365259https://www.drupal.org/node/2365685https://exchange.xforce.ibmcloud.com/vulnerabilities/98445
