CVE-2017-15273

Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2017-10-31

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Mahara (Mahara)

References

• https://bugs.launchpad.net/mahara/+bug/1719472
• https://bugs.launchpad.net/mahara/+bug/1719480
• https://bugs.launchpad.net/mahara/+bug/1720034
• https://mahara.org/interaction/forum/topic.php?id=8081