This is a whitepaper that details identifying cross site scripting vulnerabilities in both the Neo and Matrix LMS codebase.