Forums | Mahara Community

Security Announcements /
Multiple XSS in Mahara 1.0.14, 1.1.8 and 1.2.4


This topic is closed. Only moderators and the group administrators can post new replies.
François Marier's profile picture
Posts: 411

02 July 2010, 0:00

Category: Cross-site scripting
Severity: Major
Versions affected:

< 1.0.15

< 1.1.9

< 1.2.5

Reported by: Mahara Team
Identifier: CVE-2010-1667

As part of a major security review, the Mahara team has identified and fixed a number of cross-site scripting vulnerabilities in Mahara.

Upgrading to Mahara 1.0.15, 1.1.9 or 1.2.5 is strongly recommended for all sites.

1 result