edx-platform before 2015-08-17 allows XSS in the Studio listing of courses.Referenceshttps://open.edx.org/CVE-2015-6253https://open.edx.org/announcements/cve-2015-6253/