CVE-2025-61872 | Mahara up to 24.04.10/25.04.1 Elasticsearch7 Search Plugin Elasticsearch Query cross site scripting

A vulnerability categorized as problematic has been discovered in Mahara up to 24.04.10/25.04.1. This impacts the function Elasticsearch of the component Elasticsearch7 Search Plugin. The manipulation of the argument Query results in cross site scripting.

This vulnerability is identified as CVE-2025-61872. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.