Elgg "js" Parameter Processing Local File Inclusion Vulnerability
Description
A vulnerability has been identified in Elgg, which could be exploited by attackers to gain knowledge of sensitive information. This issue is caused by an input validation error in the "_css/js.php" script when processing the "js" parameter, which could be exploited by attackers to include or disclose the contents of local files with the privileges of the web server.