CVE-2011-0439

Published: Mar 28, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box.

Affected (24)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.2.0
Mahara Mahara	Version 1.2.0 alpha1
Mahara Mahara	Version 1.2.0 alpha2
Mahara Mahara	Version 1.2.0 alpha3
Mahara Mahara	Version 1.2.0 beta1
Mahara Mahara	Version 1.2.0 beta2
Mahara Mahara	Version 1.2.0 beta3
Mahara Mahara	Version 1.2.0 beta4
Mahara Mahara	Version 1.2.0 rc1
Mahara Mahara	Version 1.2.1
Mahara Mahara	Version 1.2.2
Mahara Mahara	Version 1.2.3
Mahara Mahara	Version 1.2.4
Mahara Mahara	Version 1.2.5
Mahara Mahara	Version 1.2.6
Mahara Mahara	Version 1.3.3

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.3.0
Mahara Mahara	Version 1.3.0 beta1
Mahara Mahara	Version 1.3.0 beta2
Mahara Mahara	Version 1.3.0 beta3
Mahara Mahara	Version 1.3.0 beta4
Mahara Mahara	Version 1.3.0 rc1
Mahara Mahara	Version 1.3.1
Mahara Mahara	Version 1.3.2