CVE-2020-15907

—

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Aug 7, 2020 (Aug 7, 2020)

Modified

Jun 17, 2026

Description

In Mahara 19.04 before 19.04.6, 19.10 before 19.10.4, and 20.04 before 20.04.1, certain places could execute file or folder names containing JavaScript.

Vendors: mahara
Products: mahara
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.