medium5.4
CVE-2021-43265
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.
Impact
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | from 20.04.0 before 20.04.5 from 20.10.0 before 20.10.3 from 21.04.0 before 21.04.2 |