Vulnerabilities > Elgg > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-24 | CVE-2021-4072 | Cross-site Scripting vulnerability in Elgg elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 |
| 2021-12-01 | CVE-2021-3964 | Unspecified vulnerability in Elgg elgg is vulnerable to Authorization Bypass Through User-Controlled Key | 5.9 |
| 2019-11-12 | CVE-2011-2935 | Cross-site Scripting vulnerability in Elgg Elgg through 1.7.10 has XSS | 6.1 |
| 2019-04-08 | CVE-2019-11016 | Open Redirect vulnerability in Elgg Elgg before 1.12.18 and 2.3.x before 2.3.11 has an open redirect. | 6.1 |