WS-2022-0374 | Mend Vulnerability Database

Vulnerability DatabaseWS-2022-0374

WS-2022-0374

Published:May 15, 2026

Updated:May 15, 2026

POST Based Reflected Cross Site Scripting in installation page in elgg/elgg.

Affected Packages

hypejunction/hypejunction (PHP):

Affected version(s) =dev-no-reply

Fix Suggestion:

Update to version no_fix

elgg/elgg (PHP):

Affected version(s) >=3.3.17 <3.3.20

Fix Suggestion:

Update to version 3.3.20

elgg/elgg (PHP):

Affected version(s) >=4.1.1 <4.1.3

Fix Suggestion:

Update to version 4.1.3

elgg/elgg (PHP):

Affected version(s) >=4.x-dev <4.0.2

Fix Suggestion:

Update to version 4.0.2

elgg/elgg (PHP):

Affected version(s) >=3.0.4 <3.0.7

Fix Suggestion:

Update to version 3.0.7

elgg/elgg (PHP):

Affected version(s) >=3.x-dev <3.0.1

Fix Suggestion:

Update to version 3.0.1

elgg/elgg (PHP):

Affected version(s) >=3.1.0 <3.1.4

Fix Suggestion:

Update to version 3.1.4

elgg/elgg (PHP):

Affected version(s) >=4.2.1 <4.3.x-dev

Fix Suggestion:

Update to version 4.3.x-dev

elgg/elgg (PHP):

Affected version(s) >=1.10.0-rc.1 <1.12.18

Fix Suggestion:

Update to version 1.12.18

elgg/elgg (PHP):

Affected version(s) >=4.3.1 <4.3.4

Fix Suggestion:

Update to version 4.3.4

elgg/elgg (PHP):

Affected version(s) >=3.3.x-dev <3.3.16

Fix Suggestion:

Update to version 3.3.16

smellems/wet4 (PHP):

Affected version(s) =dev-master

Fix Suggestion:

Update to version no_fix

elgg/elgg (PHP):

Affected version(s) >=2.3.13 <3.0.0-rc.2

Fix Suggestion:

Update to version 3.0.0-rc.2

elgg/elgg (PHP):

Affected version(s) >=3.2.x-dev <3.3.0

Fix Suggestion:

Update to version 3.3.0

elgg/elgg (PHP):

Affected version(s) =4.2.0 <4.2.x-dev

Fix Suggestion:

Update to version 4.2.x-dev

elgg/elgg (PHP):

Affected version(s) >=2.0.0-alpha.1 <2.3.9

Fix Suggestion:

Update to version 2.3.9

elgg/elgg (PHP):

Affected version(s) >=3.3.25 <4.0.0-beta.3

Fix Suggestion:

Update to version 4.0.0-beta.3

Related Resources (1)

https://github.com/elgg/elgg/commit/966f1c994db395bc1297d9c8427c209f94a125b5

Do you need more information?

CVSS v4

Base Score:

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Attack Requirements

NONE

Privileges Required

NONE

User Interaction

PASSIVE

Vulnerable System Confidentiality

LOW

Vulnerable System Integrity

LOW

Vulnerable System Availability

NONE

Subsequent System Confidentiality

LOW

Subsequent System Integrity

LOW

Subsequent System Availability

NONE

CVSS v3

Base Score:

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

LOW

Availability

NONE