{"action":"Upgrade elgg/elgg to 1.7.11 or later.","affected":[{"fixed":"1.7.11","introduced":"0"}],"component":"elgg/elgg","cve_ids":["CVE-2011-2935"],"ecosystem":"Packagist","epss":0.01057,"exploited":false,"fixed_versions":["1.7.11"],"ghsa_id":"GHSA-mcfm-j5g6-w26f","id":"tcs_01M5KF5EF74Y124QT2A8G87HH1","modified_at":"2024-01-12T22:26:37.605394Z","published_at":"2022-04-22T00:24:11Z","references":["https://osv.dev/vulnerability/GHSA-mcfm-j5g6-w26f","https://nvd.nist.gov/vuln/detail/CVE-2011-2935","https://github.com/Elgg/Elgg/issues/3544","https://github.com/Elgg/Elgg/commit/2843b4f846874d434a2403ac1f27e41035b45e04","https://github.com/Elgg/Elgg","https://oss-security.openwall.narkive.com/1UH3NYx8/cve-request-elgg-1-7-10-multiple-vulnerabilities","https://security-tracker.debian.org/tracker/CVE-2011-2935","https://web.archive.org/web/20110907122607/http://blog.elgg.org/pg/blog/brett/read/189/elgg-1711-released","http://yehg.net/lab/pr0js/advisories/[elgg_1710]_xss_sqlin"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mcfm-j5g6-w26f","url":"https://osv.dev/vulnerability/GHSA-mcfm-j5g6-w26f"}],"summary":"Elgg Reflected XSS Vulnerability"}