PatchTheCVE: elgghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-4072: elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')https://patchthecve.com/cve/CVE-2021-4072.htmlhttps://patchthecve.com/cve/CVE-2021-4072.htmlWed, 17 Jun 2026 04:18:59 +0000MEDIUM 5.4: elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-3980: elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actorhttps://patchthecve.com/cve/CVE-2021-3980.htmlhttps://patchthecve.com/cve/CVE-2021-3980.htmlWed, 17 Jun 2026 04:06:20 +0000HIGH 7.5: elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized ActorCVE-2021-3964: elgg is vulnerable to Authorization Bypass Through User-Controlled Keyhttps://patchthecve.com/cve/CVE-2021-3964.htmlhttps://patchthecve.com/cve/CVE-2021-3964.htmlWed, 17 Jun 2026 04:06:17 +0000MEDIUM 5.9: elgg is vulnerable to Authorization Bypass Through User-Controlled Key