Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the $searchcourse parameter in mod/feedback/mapcourse.php...