Description edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. References https://open.edx.org/CVE-2015-6253 https://open.edx.org/announcements/cve-2015-6253/