Code injection

2021-11-0222:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.

CPENameOperatorVersion
maharage21.04.0
maharalt21.04.2
maharage20.10.0
maharalt20.10.3
maharage20.04.0
maharalt20.04.5

Name	Operator	Version
mahara	ge	21.04.0
mahara	lt	21.04.2
mahara	ge	20.10.0
mahara	lt	20.10.3
mahara	ge	20.04.0
mahara	lt	20.04.5

References

bugs.launchpad.net/mahara/+bug/1944633

mahara.org/interaction/forum/topic.php?id=8953