CVE-2012-6561

Published: May 23, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected (23)

Products: Elgg: Elgg

Elgg

1 product

Elgg

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Elgg Elgg	Up to 1.8.4
Elgg Elgg	Version 1.7.0
Elgg Elgg	Version 1.7.10
Elgg Elgg	Version 1.7.11
Elgg Elgg	Version 1.7.12
Elgg Elgg	Version 1.7.13
Elgg Elgg	Version 1.7.14
Elgg Elgg	Version 1.7.15
Elgg Elgg	Version 1.7.16
Elgg Elgg	Version 1.7.17
Elgg Elgg	Version 1.7.18
Elgg Elgg	Version 1.7.1
Elgg Elgg	Version 1.7.2
Elgg Elgg	Version 1.7.3
Elgg Elgg	Version 1.7.4
Elgg Elgg	Version 1.7.5
Elgg Elgg	Version 1.7.6
Elgg Elgg	Version 1.7.7
Elgg Elgg	Version 1.7.8
Elgg Elgg	Version 1.7.9
Elgg Elgg	Version 1.8.0.1
Elgg Elgg	Version 1.8.1
Elgg Elgg	Version 1.8.3