CVE-2010-1667

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2010-07-06

http://www.securityfocus.com/bid/41319

http://wiki.mahara.org/Release_Notes/1.0.15