In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2576.json"