In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.Referenceshttps://moodle.org/mod/forum/discuss.php?d=398352
