CVE-2024-39923

Mahara versions 24.04 before 24.04.2 and 23.04 before 23.04.7 are vulnerable to a Cross-Site Scripting (XSS) attack. The flaw exists because the About , Contact , and Help footer links do not properly sanitize input values. While these links can only be configured by an administrator , they are c...