catalyst Mahara Vulnerabilities