CVE-2020-23052

Name of the Vulnerable Software and Affected Versions Catalyst IT Ltd Mahara CMS version 19.10.2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities found in the groupfiles.php component. These vulnerabilities can be exploited via the Number (also referred to as Nombre) and Description (also referred to as Descripción) parameters.

Recommendations For Catalyst IT Ltd Mahara CMS version 19.10.2, consider disabling the groupfiles.php component or restricting access to it until a patch is available. Avoid using the Number and Description parameters in the affected component to minimize the risk of exploitation.