Moodle 1.3.2 and Moodle 1.4 dev is susceptible to a cross site scripting flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33784/moodlexss.txt
Source: https://packetstormsecurity.com/files/33784/moodlexss.txt.html