CVE-2011-2771

Mahara < 1.4.0 - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed.

References (5)

Scores

EPSS 0.0029
EPSS Percentile 52.5%

Classification

CWE
CWE-79
Status published

Affected Products (50)

mahara/mahara < 1.4.0
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
mahara/mahara
... and 35 more

Timeline

Published Nov 15, 2011
Tracked Since Feb 18, 2026