CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.