by Marina Glancy.
|Description:||Serving files attached to evidence of prior learning did not force download. When viewed by other users they would be opened in current moodle sessions|
|Issue summary:||XSS in attachments to evidence of prior learning|
|Versions affected:||3.2 to 3.2.1 and 3.1 to 3.1.4|
|Versions fixed:||3.2.2 and 3.1.5|