CVE-2017-15273

Published: Oct 31, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts.

Affected (42)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 15.04.0
Mahara Mahara	Version 15.04.10
Mahara Mahara	Version 15.04.11
Mahara Mahara	Version 15.04.12
Mahara Mahara	Version 15.04.13
Mahara Mahara	Version 15.04.15
Mahara Mahara	Version 15.04.1
Mahara Mahara	Version 15.04.2
Mahara Mahara	Version 15.04.3
Mahara Mahara	Version 15.04.4
Mahara Mahara	Version 15.04.5
Mahara Mahara	Version 15.04.6
Mahara Mahara	Version 15.04.7
Mahara Mahara	Version 15.04.8
Mahara Mahara	Version 15.04.9
Mahara Mahara	Version 15.04 rc1
Mahara Mahara	Version 15.04 rc2

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 16.04.0
Mahara Mahara	Version 16.04.1
Mahara Mahara	Version 16.04.2
Mahara Mahara	Version 16.04.3
Mahara Mahara	Version 16.04.4
Mahara Mahara	Version 16.04.5
Mahara Mahara	Version 16.04.6
Mahara Mahara	Version 16.04.7
Mahara Mahara	Version 16.04.8
Mahara Mahara	Version 16.04 rc1
Mahara Mahara	Version 16.04 rc2

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 16.10.0
Mahara Mahara	Version 16.10.1
Mahara Mahara	Version 16.10.2
Mahara Mahara	Version 16.10.3
Mahara Mahara	Version 16.10.4
Mahara Mahara	Version 16.10.5
Mahara Mahara	Version 16.10 rc1
Mahara Mahara	Version 16.10 rc2

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 17.04.0
Mahara Mahara	Version 17.04.1
Mahara Mahara	Version 17.04.2
Mahara Mahara	Version 17.04.3
Mahara Mahara	Version 17.04 rc1
Mahara Mahara	Version 17.04 rc2