Vendor

Elgg

6 known vulnerabilities.

Products

elgg/elgg 3 Elgg 3

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 4.3

CVE-2026-65650 Public exploit

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

Elgg Elgg

Jul 22, 2026
Medium 5.3

CVE-2021-3980

Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Elgg elgg/elgg elgg/elgg Packagist

Dec 3, 2021
Medium 4.3

CVE-2021-3964

Authorization Bypass Through User-Controlled Key in elgg/elgg

elgg is vulnerable to Authorization Bypass Through User-Controlled Key

Elgg elgg/elgg elgg/elgg Packagist

Dec 1, 2021
Medium 6.1

CVE-2011-2935

Elgg Reflected XSS Vulnerability

Elgg through 1.7.10 has XSS

Elgg Elgg elgg/elgg Packagist

Nov 12, 2019