VYPR
← All advisories
Medium severity6.1OSV Advisory· Published Apr 9, 2018· Updated Jun 17, 2026

CVE-2018-6182

CVE-2018-6182

Description

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of POST data containing bad content with which to hit the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mahara (software)/MaharaOSV2 versions
    16.10.0_RELEASE, 16.10.1_RELEASE, 16.10.2_RELEASE, …+ 1 more
    • (no CPE)range: 16.10.0_RELEASE, 16.10.1_RELEASE, 16.10.2_RELEASE, …
    • (no CPE)range: >=16.10, <16.10.9; >=17.04, <17.04.7; >=17.10, <17.10.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.