Update README.md

Author: MM-coder

README.md

@@ -1,10 +1,30 @@
-# NEO & MATRIX LMS Cross-site scripting attacks 
-## (plus timer mismatch bug)
+# NEO & MATRIX LMS Cross-site scripting attacks (plus timer mismatch bug)
 
-### Introduction 
+## Introduction 
 
-This repository serves as a directory of both the writeups and the proof-of-concept for the investigation in to XSS vulnerabilities in the aforementioned peices of software
+This repository serves as a directory of both the writeups and the proof-of-concept for the investigation in to XSS vulnerabilities in the aforementioned peices of software.
 
-### Vulnerabities
-#### XSS
+## Vulnerabities
+### XSS
 
+|    Component Tested   | Is XSS possible? |     Under what circumstances?    | Possibly affected user groups | CVSS Attributed |
+|:---------------------:|:----------------:|:--------------------------------:|:-----------------------------:|:---------------:|
+| Debate Assignments    | No               | N/A                              | N/A                           | N/A             |
+| Essay Assignments     | No               | N/A                              | N/A                           | N/A             |
+| Forum Assignments     | No               | N/A                              | N/A                           | N/A             |
+| Survey Assignments    | Yes              | Freeform Questions               | Instructors                   | 5.4 (medium)    |
+| Quiz Assigments       | Yes              | Arithmetic Questions             | Instructors                   | 5.4 (medium)    |
+| Task Descriptions     | Yes              | All task descriptions            | Learners, Instructors         | 4.8 (medium)    |
+| User Portfolio/Locker | Yes              | HTML files in a user's portfolio | Learners, Instructors         | 5.4 (medium)    |
+
+### Timer
+
+The timer on quiz assignments is client-side only, the server does not check the submission time, hence by disabling the timer client side we effectively disable the timer.
+
+## License 
+
+![License Badge](https://mirrors.creativecommons.org/presskit/buttons/80x15/svg/by-nc.svg)
+
+The aforementioned code and documents are protected and released to the public under the Creative Commons Attribution-NonCommercial 4.0 International (CC BY-NC 4.0) License which can be viewed in license.md or on the Creative Commons website (https://creativecommons.org/licenses/by-nc/4.0/). Any failure to comply with the terms designated in the license will be met with swift judicial action by the author.
+
+By downloading, executing or otherwise transferring the contents of this repository by any means you are legally bound to the terms stipulated in the license.