CVE-2013-0234

Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...

PT-2014-2437

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.7.17 Elgg versions 1.8.x prior to 1.8.13 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the paramstwitter username parameter to t...

CVE-2013-0234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the paramstwitterusername parameter to action/widgets/save...