← All advisories

Medium severity6.1NVD Advisory· Published Nov 12, 2019· Updated Jun 16, 2026

CVE-2011-2935

CVE-2011-2935

Description

Elgg through 1.7.10 has XSS

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
elgg/elggPackagist	< 1.7.11	1.7.11

Affected products

3

Elgg/Elgg2 versions
cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elgg:elgg:*:*:*:*:*:*:*:*range: <=1.7.10
- (no CPE)range: through 1.7.10
ghsa-coords
pkg:composer/elgg/elgg
Range: < 1.7.11

Patches

Vulnerability mechanics

References

9

oss-security.openwall.narkive.com/1UH3NYx8/cve-request-elgg-1-7-10-multiple-vulnerabilitiesnvdExploitMailing ListThird Party AdvisoryWEB
access.redhat.com/security/cve/cve-2011-2935nvdNot ApplicableThird Party Advisory
github.com/advisories/GHSA-mcfm-j5g6-w26fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2011-2935ghsaADVISORY
security-tracker.debian.org/tracker/CVE-2011-2935nvdThird Party AdvisoryWEB
yehg.net/lab/pr0js/advisories/[elgg_1710]_xss_sqlinghsaWEB
github.com/Elgg/Elgg/commit/2843b4f846874d434a2403ac1f27e41035b45e04ghsaWEB
github.com/Elgg/Elgg/issues/3544ghsaWEB
web.archive.org/web/20110907122607/http://blog.elgg.org/pg/blog/brett/read/189/elgg-1711-releasedghsaWEB

News mentions

0

No linked articles in our index yet.