CVE-2020-23052: XSS

Published Oct 22, 2021

Updated

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component groupfiles.php via the Number (Nombre) and Description (Descripción) parameters.

Affected Software

1 affected component

Catalyst Mahara=19.10.2

Event History

Oct 22, 2021

CVE Published

via MITRE·07:20 PM

Data Sourced

via MITRE·07:20 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-23052?

The severity of CVE-2020-23052 is classified as high due to its multiple cross-site scripting vulnerabilities.

How do I fix CVE-2020-23052?

To fix CVE-2020-23052, update Mahara CMS to the latest version that resolves the identified vulnerabilities.

What components are affected by CVE-2020-23052?

CVE-2020-23052 specifically affects the groupfiles.php component of Mahara CMS version 19.10.2.

What are the potential impacts of CVE-2020-23052?

The potential impacts of CVE-2020-23052 include unauthorized access to user sessions and execution of arbitrary scripts.

Is CVE-2020-23052 present in earlier versions of Mahara CMS?

CVE-2020-23052 has been reported specifically in version 19.10.2, and earlier versions may not be affected.