Description edx-platform before 2015-09-17 allows XSS via a team name. References https://open.edx.org/announcements/cve-2015-6960/