Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. An authenticated user can inject and execute arbitrary Javascript using the admin/webservice/service.php page through the name field...