Cross-site Scripting (XSS)

Moodle is susceptible to cross-site scripting XSS attacks. The attacks are possible because it does not sanitize the idnumber parameter in cohort/edit.php, allowing malicious authenticated users to input arbitrary web script or HTML through it...