eFront Learning 3.6.11 Cross Site Scripting

eFront Learning version 3.6.11 suffers from a stored cross site scripting vulnerability.