Curverider Elgg 1.0 - Templates HTML Injection

Curverider Elgg 1.0 - Templates HTML Injection source: https://www.securityfocus.com/bid/43871/info Elgg is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploits require the attacker be an...

Curverider Elgg 1.0 - Templates HTML Injection

source: https://www.securityfocus.com/bid/43871/info Elgg is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Exploits require the attacker be an authenticated user; this permission may be trivial ...