Open edX Ironwood.1 allows support/certificates?user= reflected XSS.Referenceshttps://www.netsparker.com/web-applications-advisories/ns-19-014-reflected-cross-site-scripting-in-openedx/
