Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
dokeos dokeos 2.1.1