Moodle versions 1.3 and below suffer from a cross site scripting flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33228/moodle13.txt
Source: https://packetstormsecurity.com/files/33228/moodle13.txt.html