Elgg vulnerabilities

Products

• Elgg 12
• Elgg/elgg 3

Newest

• elgg Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar... CVE-2026-65650 Public exploit 4.3 MediumJuly 22, 2026
• elgg, elgg elgg/elgg +1 more Cross-site Scripting (XSS) - Stored in elgg/elgg CVE-2021-4072 Fix available 9.0 CriticalDecember 24, 2021
• elgg, elgg elgg/elgg +1 more Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg CVE-2021-3980 Fix available 5.3 MediumDecember 3, 2021
• elgg, elgg elgg/elgg +1 more Authorization Bypass Through User-Controlled Key in elgg/elgg CVE-2021-3964 Fix available 4.3 MediumDecember 1, 2021
• elgg Elgg through 1.7.10 has a SQL injection vulnerability CVE-2011-2936 9.8 CriticalNovember 12, 2019
• elgg Elgg Reflected XSS Vulnerability CVE-2011-2935 Fix available 6.1 MediumNovember 12, 2019
• elgg Elgg open redirect CVE-2019-11016 Fix available 6.1 MediumApril 8, 2019
• elgg Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x... CVE-2013-0234 4.3 MediumFebruary 2, 2014
• elgg engine/lib/access.php in Elgg before 1.8.5 does not properly clear cached access lists during... CVE-2012-6563 4.3 MediumMay 23, 2013
• elgg engine/lib/users.php in Elgg before 1.8.5 does not properly specify permissions for the useradd... CVE-2012-6562 6.8 MediumMay 23, 2013
• elgg Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows... CVE-2012-6561 4.3 MediumMay 23, 2013
• elgg Elgg 1.7.6 allows remote attackers to obtain sensitive information via a direct request to a .php... CVE-2011-3733 5.0 MediumSeptember 23, 2011