Launchpad.net

CVE 2023-5541

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

See the CVE page on Mitre.org for more details.