Skip to content
EElgg
Products
| Product | CVEs | Exploited | Latest |
|---|
| elgg/elgg | 3 | – | Dec 24, 2021 |
| Elgg | 1 | – | Jul 22, 2026 |
Exploited and recent CVEs
-
CVE-2026-65650
Medium 4.3
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
0.5%
-
CVE-2021-4072
Critical 9.0
Cross-site Scripting (XSS) - Stored in elgg/elgg
0.7%
-
CVE-2021-3980
Medium 5.3
Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg
1.6%
-
CVE-2021-3964
Medium 4.3
Authorization Bypass Through User-Controlled Key in elgg/elgg
0.8%