CVE-2021-3980

CVE-2021-3980 describes a high-severity vulnerability in Elgg, an open-source social networking engine, where private personal information can be exposed to unauthorized actors. With a CVSS score of 7.5, this vulnerability allows unauthenticated attackers to remotely access sensitive data without user interaction, leading to a high confidentiality impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.