elgg/elgg

5 results · Feed

• Critical 9.0
  CVE-2021-4072

  Cross-site Scripting (XSS) - Stored in elgg/elgg

  elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  Elgg elgg/elgg elgg/elgg Packagist
  Dec 24, 2021
• Medium 5.3
  CVE-2021-3980

  Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

  elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

  Elgg elgg/elgg elgg/elgg Packagist
  Dec 3, 2021
• Medium 4.3
  CVE-2021-3964

  Authorization Bypass Through User-Controlled Key in elgg/elgg

  elgg is vulnerable to Authorization Bypass Through User-Controlled Key

  Elgg elgg/elgg elgg/elgg Packagist
  Dec 1, 2021
• Medium 6.1
  CVE-2011-2935

  Elgg Reflected XSS Vulnerability

  Elgg through 1.7.10 has XSS

  Elgg Elgg elgg/elgg Packagist
  Nov 12, 2019
• Medium 6.1
  CVE-2019-11016

  Elgg open redirect

  Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.

  elgg/elgg Packagist
  Apr 8, 2019