Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. The library does not properly filter user input in the qualification and rating fields for rubric/advanced grading. This allows a malicious user to inject and execute arbitrary script...