Cross site Scripting(XSS) Vulnerability in Mahara 1.6

[M.R.Vignesh Kumar]

Hi Mahara Security Team,

I have found a Persistent/Stored Cross site scripting (XSS) vulnerability in Mahara version 1.6.

What is Cross site scripting(XSS): http://en.wikipedia.org/wiki/Cross-site_scripting

The vulnerability exists in the following link:
http://demo.mahara.org/artefact/internal/notes.php

For example, in a note such as http://demo.mahara.org/artefact/internal/editnote.php?id=1XX , the "Note Title" is thrown with a xss vector such as "><img src=x onerror=prompt(1);> or <script>alert(/xss/);</script>.

When the notes page(http://demo.mahara.org/artefact/internal/notes.php ) is loaded, the payload on the title triggers the xss since it is not sanitized.

Fix it as soon as possible.
Thanks.

M.R.Vignesh Kumar(@vigneshkumarmr)