GHSA-MCFM-J5G6-W26F Elgg Reflected XSS Vulnerability

VULNERABILITY DESCRIPTION The internalname parameter is not properly sanitized, which allows attacker to conduct Cross Site Scripting attack. This may allow an attacker to create a specially crafted URL that would execute arbitrary script code in a victim's browser PROOF-OF-CONCEPT/EXPLOIT http...

PT-2019-6660

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.7.11 Description The issue arises from improper sanitization of the internalname parameter, allowing an attacker to conduct a Cross Site Scripting attack. This could enable an attacker to create a specially crafted URL...