CVE-2011-2935

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.7.11

Description The issue arises from improper sanitization of the internalname parameter, allowing an attacker to conduct a Cross Site Scripting attack. This could enable an attacker to create a specially crafted URL that executes arbitrary script code in a victim's browser.

Recommendations For Elgg versions prior to 1.7.11, as a temporary workaround, consider restricting access to the internalname parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.