elgg is vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-4072 · ADVISORY
• elgg/elgg commit c30b17b · WEB
• elgg/elgg · PACKAGE
• huntr.dev/bounties/74034253-732a-4251-a0f9-eca5f576c955 · WEB

elgg/elgg のその他の脆弱性

• CVE-2021-3980高 7.5elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
• CVE-2021-3964中 5.9elgg is vulnerable to Authorization Bypass Through User-Controlled Key
• CVE-2011-2935中 6.1Elgg through 1.7.10 has XSS
• CVE-2019-11016中 6.1Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.