Forums | Mahara Community
Security announcements
/
Multiple XSS in Mahara 1.0.14, 1.1.8 and 1.2.4
02 July 2010, 0:00
| Category: | Cross-site scripting |
| Severity: | Major |
| Versions affected: |
< 1.0.15 < 1.1.9 < 1.2.5 |
| Reported by: | Mahara Team |
| Identifier: | CVE-2010-1667 |
As part of a major security review, the Mahara team has identified and fixed a number of cross-site scripting vulnerabilities in Mahara.
Upgrading to Mahara 1.0.15, 1.1.9 or 1.2.5 is strongly recommended for all sites.