CVE-2011-2771

Published: Nov 15, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed.

Affected (72)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

72 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Up to 1.4.0
Mahara Mahara	Version 0.9.0
Mahara Mahara	Version 0.9.1
Mahara Mahara	Version 0.9.2
Mahara Mahara	Version 1.0.0
Mahara Mahara	Version 1.0.10
Mahara Mahara	Version 1.0.11
Mahara Mahara	Version 1.0.12
Mahara Mahara	Version 1.0.13
Mahara Mahara	Version 1.0.14
Mahara Mahara	Version 1.0.15
Mahara Mahara	Version 1.0.1
Mahara Mahara	Version 1.0.2
Mahara Mahara	Version 1.0.3
Mahara Mahara	Version 1.0.4
Mahara Mahara	Version 1.0.5
Mahara Mahara	Version 1.0.6
Mahara Mahara	Version 1.0.7
Mahara Mahara	Version 1.0.8
Mahara Mahara	Version 1.0.9
Mahara Mahara	Version 1.1.0
Mahara Mahara	Version 1.1.0 alpha1
Mahara Mahara	Version 1.1.0 alpha2
Mahara Mahara	Version 1.1.0 alpha3
Mahara Mahara	Version 1.1.0 beta1
Mahara Mahara	Version 1.1.0 beta2
Mahara Mahara	Version 1.1.0 beta3
Mahara Mahara	Version 1.1.0 beta4
Mahara Mahara	Version 1.1.0 rc1
Mahara Mahara	Version 1.1.0 rc2
Mahara Mahara	Version 1.1.1
Mahara Mahara	Version 1.1.2
Mahara Mahara	Version 1.1.3
Mahara Mahara	Version 1.1.4
Mahara Mahara	Version 1.1.5
Mahara Mahara	Version 1.1.6
Mahara Mahara	Version 1.1.7
Mahara Mahara	Version 1.1.8
Mahara Mahara	Version 1.1.9
Mahara Mahara	Version 1.1
Mahara Mahara	Version 1.2.0
Mahara Mahara	Version 1.2.0 alpha1
Mahara Mahara	Version 1.2.0 alpha2
Mahara Mahara	Version 1.2.0 alpha3
Mahara Mahara	Version 1.2.0 beta1
Mahara Mahara	Version 1.2.0 beta2
Mahara Mahara	Version 1.2.0 beta3
Mahara Mahara	Version 1.2.0 beta4
Mahara Mahara	Version 1.2.0 rc1
Mahara Mahara	Version 1.2.1
Mahara Mahara	Version 1.2.2
Mahara Mahara	Version 1.2.3
Mahara Mahara	Version 1.2.4
Mahara Mahara	Version 1.2.5
Mahara Mahara	Version 1.2.6
Mahara Mahara	Version 1.3.0
Mahara Mahara	Version 1.3.0 beta1
Mahara Mahara	Version 1.3.0 beta2
Mahara Mahara	Version 1.3.0 beta3
Mahara Mahara	Version 1.3.0 beta4
Mahara Mahara	Version 1.3.0 rc1
Mahara Mahara	Version 1.3.1
Mahara Mahara	Version 1.3.2
Mahara Mahara	Version 1.3.3
Mahara Mahara	Version 1.3.4
Mahara Mahara	Version 1.3.5
Mahara Mahara	Version 1.3.6
Mahara Mahara	Version 1.3.7
Mahara Mahara	Version 1.4 rc1
Mahara Mahara	Version 1.4 rc2
Mahara Mahara	Version 1.4 rc3
Mahara Mahara	Version 1.4 rc4