Medium severity6.1NVD Advisory· Published Aug 26, 2025· Updated Jun 17, 2026
CVE-2024-35203
CVE-2024-35203
Description
Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part of its name, that is uploaded via the Mahara filebrowser system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*range: <22.10.6
- (no CPE)
- (no CPE)range: <22.10.6, <23.04.6, <24.04.1
Patches
Vulnerability mechanics
References
2- git.mahara.org/catalyst-security/mahara-security/-/merge_requests/6nvdVendor Advisory
- mahara.org/interaction/forum/topic.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.