~ / search / GHSA-2xw8-j43j-5vxp

GHSA-2xw8-j43j-5vxp

elgg is vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-4072

Packages

EcosystemPackageAffectedFixed in
Packagist elgg/elgg < 3.3.24 3.3.24

Details

As written in the advisory (Markdown source, shown as plain text).

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

External links from the advisory. They lead to third-party sites.