Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2022-29584

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript code is constructed to perform an action.

Related bugs and status

CVE-2022-29584 (Candidate) is related to these bugs:

Bug #1968920: XSS exploit in 'External media' block

		In	Importance	Status
1968920	XSS exploit in 'External media' block	Mahara	High	Fix Released
1968920	XSS exploit in 'External media' block	Mahara 21.10	High	Fix Released
1968920	XSS exploit in 'External media' block	Mahara 21.04	High	Fix Released
1968920	XSS exploit in 'External media' block	Mahara 22.04	High	Fix Released
1968920	XSS exploit in 'External media' block	Mahara 20.10	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://bugs.launchpad...
MISC: https://mahara.org/int...