CVE-2021-4072

2021-12-2414:15:07

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.4%

JSON

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

CPENameOperatorVersion
elggeq2.0.0-beta.3
elggeq3.3.3
elggeq2.3.8
elggeq3.1.3
elggeq1.8.4
elggeq2.0.0-beta.2
elggeq2.3.16
elggeq3.0.6
elggeq2.2.0
elggeq2.0.0-beta.1

Name	Operator	Version
elgg	eq	2.0.0-beta.3
elgg	eq	3.3.3
elgg	eq	2.3.8
elgg	eq	3.1.3
elgg	eq	1.8.4
elgg	eq	2.0.0-beta.2
elgg	eq	2.3.16
elgg	eq	3.0.6
elgg	eq	2.2.0
elgg	eq	2.0.0-beta.1

Rows per page:

1-10 of 1731

References

github.com/elgg/elgg/commit/c30b17bf75256ed3fcc84e2083147cc3951423d0

huntr.dev/bounties/74034253-732a-4251-a0f9-eca5f576c955