CVE-2024-39923

6.1 mediumEPSS 0.2%

Medium (6.1) in mahara mahara. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting (XSS) due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in person.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-08-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mahara:mahara

References

https://mahara.org/interaction/forum/topic.php?id=9546
https://mahara.org/interaction/forum/view.php?id=43

Check your stack JSON