CVE-2022-29584

2022-04-2816:15:08

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript code is constructed to perform an action.

CPENameOperatorVersion
maharaeq21.10.1_RELEASE
maharaeq21.10.0_RELEASE

CPE	Name	Operator	Version
	mahara	eq	21.10.1_RELEASE
	mahara	eq	21.10.0_RELEASE

References

bugs.launchpad.net/mahara/+bug/1968920

mahara.org/interaction/forum/topic.php?id=9095