Unrated
Open edX Ironwood.1 allows support/certificates?user= reflected XSS.
CVE-2019-20513
First seen on SecPulse
References
- report netsparker.com