Vulnerabilities > Elgg > Elgg > 2.0.0

DATE CVE VULNERABILITY TITLE RISK
2021-12-24 CVE-2021-4072 Cross-site Scripting vulnerability in Elgg
elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
network
low complexity
elgg CWE-79
5.4
2021-12-03 CVE-2021-3980 Unspecified vulnerability in Elgg
elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
network
low complexity
elgg
7.5
2021-12-01 CVE-2021-3964 Unspecified vulnerability in Elgg
elgg is vulnerable to Authorization Bypass Through User-Controlled Key
network
high complexity
elgg
5.9