GibbonEdu Core 26.0.00 Cross Site Scripting

GibbonEdu Core version 26.0.00 suffers from a cross site scripting vulnerability that can lead to privilege escalation.