Skip to content
CVE PROGRAM SOURCE RECORD1.3 Low

CVE-2026-33402

SAK-52311: Sakai site-manage group titles can contain XSS content

Description

Sakai is a Collaboration and Learning Environment (CLE). In versions 23.0 through 23.4 and 25.0 through 25.1, group titles and description can contain cross-site scripting scripts. The patch is included in releases 25.2 and 23.5. As a workaround, one can check the SAKAI_SITE_GROUP table for titles and descriptions that contain this info.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sakaiproject sakai

  • >= 23.0, < 23.5affected
  • >= 25.0, < 25.2affected

References