The Moodle Atto Editor, which does not have versions, suffers from a cross site scripting vulnerability.