CVE-2021-43265

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element...

Mahara < 20.04.5, 20.10.x < 20.10.3, 21.4.x < 21.04.2 Multiple Vulnerabilities

Mahara is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara"; if description...

CVE-2021-43265

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element...

CVE-2021-43265

CVE-2021-43265 affects Mahara up to versions 20.04.5, 20.10.3, 21.04.2, and 21.10.0, where certain tag syntax could be used for XSS (e.g., via a SCRIPT element). Root cause: input handling accepts unsafe tag syntax. Impact: cross-site scripting risk. Remediation: upgrade to the fixed releases (e....