CVE-2022-29584

2022-04-2815:26:15

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript code is constructed to perform an action.

References

bugs.launchpad.net/mahara/+bug/1968920

mahara.org/interaction/forum/topic.php?id=9095