CVE-2012-2247

Published: Nov 24, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a crafted SVG file.

Affected (15)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.4.0
Mahara Mahara	Version 1.4.1
Mahara Mahara	Version 1.4.2
Mahara Mahara	Version 1.4.3
Mahara Mahara	Version 1.4.4
Mahara Mahara	Version 1.4 rc1
Mahara Mahara	Version 1.4 rc2
Mahara Mahara	Version 1.4 rc3
Mahara Mahara	Version 1.4 rc4

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.5.0
Mahara Mahara	Version 1.5.1
Mahara Mahara	Version 1.5.2
Mahara Mahara	Version 1.5.3
Mahara Mahara	Version 1.5 rc1
Mahara Mahara	Version 1.5 rc2