CVE-2024-45753

The ePortfolio management system Mahara versions 23.04.8 and 24.04.4 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input within the external RSS feed block , where a malicious value provided in the link attribute of an external feed XML can trigger...