| Package | Affected versions | Patched versions |
|---|---|---|
| elgg/elgg | ≥ 4.0.0, < 4.0.5< 3.3.23 | 4.0.53.3.23 |
| elgg | < 3.3.23 | 3.3.23 |
elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX requests to 'ajax/form/admin/'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free