Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.Referenceshttp://wiki.mahara.org/Release_Notes/1.1.9http://wiki.mahara.org/Release_Notes/1.2.5http://wiki.mahara.org/Release_Notes/1.0.15http://secunia.com/advisories/40431https://exchange.xforce.ibmcloud.com/vulnerabilities/59993http://www.securityfocus.com/bid/41319
