Security Moodle CMS 3.1.2 Cross Site Scripting / File Upload November 1, 2016 007admin Leave a comment Moodle CMS versions 3.1.2 and below suffer from cross site scripting and file upload vulnerabilities.