Open edX Ironwood.1 allows support/certificates?course_id= reflected XSS.Referenceshttps://www.netsparker.com/web-applications-advisories/ns-19-014-reflected-cross-site-scripting-in-openedx/