CVE-2012-5776: Improper Neutralization of Input During Web Page Generation

Dokeos 2.1.1 has multiple XSS issues involving "extra" parameters in main/auth/profile.php...