Moodle CMS versions 3.1.2 and below suffer from cross site scripting and file upload vulnerabilities. Continue reading...