Description Elgg through 1.7.10 has a SQL injection vulnerability Remediation References CVE-2011-2936 Related Vulnerabilities PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1912) e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3843) WordPress Plugin Far Future Expiry Header Cross-Site Request Forgery (1.4) Drupal CVE-2018-7602 Vulnerability (CVE-2018-7602) Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8142) Severity Critical Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2011-2936