Beveiligingsadvies

CVE-2025-61872

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-24 00:00:00

Laatst bijgewerkt 2026-04-24 15:03:27

Toegewezen door mitre

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string. This occurs in the 'search site' feature when using the Elasticsearch7 search plugin. The Elasticsearch function does not properly sanitize input in the query parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗