CVE-2011-1405

Publication date 13 May 2011

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mahara 11.04 natty
Fixed 1.2.7-1ubuntu0.1
10.10 maverick
Fixed 1.2.5-2ubuntu0.2
10.04 LTS lucid
Fixed 1.2.4-1ubuntu0.3
8.04 LTS hardy Not in release
6.06 LTS dapper Not in release