Open Redirection

elgg/elgg is vulnerable to open redirection attacks. The vulnerability exists as the values of Referer and $url are not sanitized, allowing an attacker to redirect a victim to a malicious site.