CVE-2024-39923: XSS

Q: What is the severity of CVE-2024-39923?

CVE-2024-39923 is rated as a moderate severity vulnerability due to potential Cross Site Scripting (XSS) risks.

Q: How do I fix CVE-2024-39923?

To fix CVE-2024-39923, update Mahara to version 24.04.2 or 23.04.7 or later.

Q: Who is affected by CVE-2024-39923?

CVE-2024-39923 affects users and administrators of Mahara versions prior to 24.04.2 and 23.04.7.

Q: What type of vulnerability is CVE-2024-39923?

CVE-2024-39923 is a Cross Site Scripting (XSS) vulnerability.

Q: Can non-admin users exploit CVE-2024-39923?

Yes, any logged-in user can be affected by the potential XSS exploitation from links set up by an admin.

Published Aug 25, 2025

Updated

An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer links can be set up to be vulnerable to Cross Site Scripting (XSS) due to not sanitising the values. These links can only be set up by an admin but are clickable by any logged-in person.

Affected Software

3 affected components

Mahara Mahara<24.04.2, <23.04.7

Mahara Mahara>=23.04.0<23.04.7

Mahara Mahara>=24.04.0<=24.04.2

Event History

Aug 25, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-39923?

CVE-2024-39923 is rated as a moderate severity vulnerability due to potential Cross Site Scripting (XSS) risks.

How do I fix CVE-2024-39923?

To fix CVE-2024-39923, update Mahara to version 24.04.2 or 23.04.7 or later.

Who is affected by CVE-2024-39923?

CVE-2024-39923 affects users and administrators of Mahara versions prior to 24.04.2 and 23.04.7.

What type of vulnerability is CVE-2024-39923?

CVE-2024-39923 is a Cross Site Scripting (XSS) vulnerability.

Can non-admin users exploit CVE-2024-39923?