Vulnerabilities in elgg

6 results

CVE-2021-3980MEDIUMExposure of Private Personal Information to an Unauthorized Actor in elgg/elggEPSS 1.6%CVE-2011-2936—Elgg through 1.7.10 has a SQL injection vulnerabilityEPSS 1.5%CVE-2011-2935—Elgg through 1.7.10 has XSSEPSS 1.1%CVE-2021-3964MEDIUMAuthorization Bypass Through User-Controlled Key in elgg/elggEPSS 0.8%CVE-2021-4072CRITICALCross-site Scripting (XSS) - Stored in elgg/elggEPSS 0.7%CVE-2026-65650MEDIUMElgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.EPSS 0.5%