Unscored CVE-2010-3871 EUVD-2010-3849GHSA-7wg6-9cv7-mw4w

Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to…

Published Nov 9, 2010 · Updated Aug 7, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.

References

mahara-groupviews-xss(63052) vdb-entry
http://wiki.mahara.org/Release_Notes/1.3.3
42152 third-party-advisory
44705 vdb-entry