Mahara Input Validation Vulnerability

Mahara is the full-featured web application for building your own ePortfolio. Mahara has an input validation vulnerability. The vulnerability arises because Mahara relies solely on code stripping from TinyMCE. An attacker could exploit this vulnerability to bypass TinyMCE and attack the server by...