What is GHSA-2xw8-j43j-5vxp?

GHSA-2xw8-j43j-5vxp is a security advisory published by GitHub Security Advisories with Medium severity. elgg is vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-2xw8-j43j-5vxp cover?

GHSA-2xw8-j43j-5vxp covers the following CVE IDs: CVE-2021-4072. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2xw8-j43j-5vxp?

GHSA-2xw8-j43j-5vxp has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-2xw8-j43j-5vxp?

GHSA-2xw8-j43j-5vxp affects 1 product, including: composer/elgg/elgg:\u003c 3.3.24.

GHSA-2xw8-j43j-5vxpMediumCVSS 5.4

elgg is vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

January 6, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-4072 →

📋 Description

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

🎯 Affected products1

composer/elgg/elgg:< 3.3.24

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-4072
https://github.com/elgg/elgg/commit/c30b17bf75256ed3fcc84e2083147cc3951423d0
https://huntr.dev/bounties/74034253-732a-4251-a0f9-eca5f576c955
https://github.com/advisories/GHSA-2xw8-j43j-5vxp