CVE-2021-4072

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4072

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4072 Cross-site Scripting (XSS) - Stored in elgg/elgg

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4072

CVE-2021-4072 concerns elgg, describing an “Improper Neutralization of Input During Web Page Generation” cross-site scripting vulnerability. The connected sources consistently reference an XSS flaw in elgg (stored XSS in the Elgg application) and, in the Huntr entry, a scenario where an attacker ...