https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-09T14:13:37.103649+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2018-08808 cnvd-2018-08808 2026-10-09T14:13:37.137267+00:00 cnvd-2018-08808 https://db.gcve.eu/vuln/fkie_cve-2018-6182 fkie_cve-2018-6182 2026-10-09T14:13:37.137315+00:00

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of POST data containing bad content with which to hit the server.

 https://db.gcve.eu/vuln/ghsa-j7qh-wjjv-qxg8 GHSA-j7qh-wjjv-qxg8 2026-10-09T14:13:37.137353+00:00

Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE is bypassed by POST packages. Therefore, Mahara should not rely on TinyMCE's code stripping alone but also clean input on the server / PHP side as one can create own packets of POST data containing bad content with which to hit the server.

 https://db.gcve.eu/vuln/gsd-2018-6182 gsd-2018-6182 2026-10-09T14:13:37.137372+00:00 gsd-2018-6182