Elgg vulnerabilities

CVEs per yearBy the year they were published

1. 20192
2. 20213
3. 20261

Newest CVEs

• CVE-2026-65650

  Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

  Elgg · Elgg

  Medium4.3
• CVE-2021-4072

  Cross-site Scripting (XSS) - Stored in elgg/elgg

  elgg · elgg/elgg

  Critical9.0
• CVE-2021-3980

  Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg

  elgg · elgg/elgg

  Medium5.3
• CVE-2021-3964

  Authorization Bypass Through User-Controlled Key in elgg/elgg

  elgg · elgg/elgg

  Medium4.3
• CVE-2011-2936

  Elgg through 1.7.10 has a SQL injection vulnerability

  Elgg · Elgg

  Critical9.8
• CVE-2011-2935

  Elgg through 1.7.10 has XSS

  Elgg · Elgg

  Medium6.1