CVE-2013-1426

2019-11-0720:46:19

debian

www.cve.org

0.001 Low

EPSS

Percentile

48.0%

JSON

Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor.

CNA Affected

[
  {
    "product": "mahara",
    "vendor": "mahara",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.9"
      }
    ]
  }
]