medium5.4
CVE-2022-29584
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript…
Impact
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript code is constructed to perform an action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mahara | Mahara | before 20.10.5 from 21.04.0 before 21.04.4 from 21.10.0 before 21.10.2 Version 22.04.0 |