PT-2021-22704

Name of the Vulnerable Software and Affected Versions: elgg affected versions not specified Description: The issue concerns exposure of private personal information to an unauthorized actor. Forms in the view namespace 'forms/admin' were not protected by an AdminGatekeeper in case of AJAX request...