VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Aug 25, 2025· Updated Jun 17, 2026

CVE-2024-39923

CVE-2024-39923

Description

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting (XSS) due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in person.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mahara (software)/Mahara3 versions
    cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*range: >=23.04.0,<23.04.7
    • (no CPE)
    • (no CPE)range: 24.04 before 24.04.2, 23.04 before 23.04.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.