| Package | Affected versions | Patched versions |
|---|---|---|
| mahara | = 1.10= 1.10.0= 1.10.1= 1.10.2= 1.10.3= 1.9= 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5= 15.04= 15.04.0 |
Mahara 1.9 before 1.9.6 and 1.10 before 1.10.4 and 15.04 before 15.04.1 are vulnerable to a site admin or institution admin being able to place HTML and Javascript into an institution display name, which will be displayed to other users unescaped on some Mahara system pages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free