edx-platform prior to 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem.
edx edx-platform