CVE-2024-39923

The Mahara ePortfolio management system is vulnerable to Cross-Site Scripting (XSS) in versions 24.04 before 24.04.2 and 23.04 before 23.04.7 . The root cause is the insufficient sanitization of values for the About , Contact , and Help footer links. While these links can only be configured by an...