CVE-2017-1000138
Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a collection if the file has Javascript code…
Published: 2017-11-03 · CVSS: Unscored
Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a collection if the file has Javascript code in its title.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7