CVE-2018-6182

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of...

CVE-2018-6182

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of...

PT-2018-17390

Name of the Vulnerable Software and Affected Versions Mahara versions 16.10 through 16.10.8 Mahara versions 17.04 through 17.04.6 Mahara versions 17.10 through 17.10.3 Description The issue arises when TinyMCE is bypassed by POST packages, allowing bad input to be processed. This occurs because...