Elgg vulnerabilities
Published CVEs affecting Elgg products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-65650
Medium · 4.3
CWE-770 Jul 22, 2026
Allocation of Resources Without Limits or Throttling in Elgg
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.