Elgg vulnerabilities
6 published CVEs name Elgg among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-65650
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
Elgg · Elgg
Medium4.3 - CVE-2021-4072
Cross-site Scripting (XSS) - Stored in elgg/elgg
elgg · elgg/elgg
Critical9.0 - CVE-2021-3980
Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg
elgg · elgg/elgg
Medium5.3 - CVE-2021-3964
Authorization Bypass Through User-Controlled Key in elgg/elgg
elgg · elgg/elgg
Medium4.3 - CVE-2011-2936
Elgg through 1.7.10 has a SQL injection vulnerability
Elgg · Elgg
Critical9.8 - CVE-2011-2935
Elgg through 1.7.10 has XSS
Elgg · Elgg
Medium6.1