CVE-2012-6561

CVE-2012-6561 affects Elgg prior to 1.8.5. The vulnerability exists in the engine/lib/views.php component, where the view parameter of index.php can be manipulated to inject arbitrary web script or HTML (a reflected/DOM-like XSS as described in sources). Impact is remote code execution within the...