A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files.Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=2304266https://moodle.org/mod/forum/discuss.php?d=461207