elgg is vulnerable to Cross-site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-4072 · ADVISORY
• elgg/elgg commit c30b17b · WEB
• elgg/elgg · PACKAGE
• huntr.dev/bounties/74034253-732a-4251-a0f9-eca5f576c955 · WEB

elgg/elgg 的其他漏洞

• CVE-2021-3980高危 7.5elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
• CVE-2021-3964中危 5.9elgg is vulnerable to Authorization Bypass Through User-Controlled Key
• CVE-2011-2935中危 6.1Elgg through 1.7.10 has XSS
• CVE-2019-11016中危 6.1Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect.