emlog

5 results · Clear filters · Feed

• Low 2.0
  CVE-2026-21431

  Emlog vulnerable to stored Cross-site Scripting via image name

  Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available.

  emlog emlog
  Jan 2, 2026
• Low 2.0
  CVE-2026-21429

  Emlog has Broken Access Control (BAC)

  Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available.

  emlog emlog
  Jan 2, 2026
• Low 2.7
  CVE-2025-62717

  Emlog Pro session verification code error due to clearing logic error

  Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. T…

  emlog emlog
  Oct 24, 2025
• Low 2.1
  CVE-2025-61769

  Emlog vulnerable to stored XSS in file upload functionality in emlog

  Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authe…

  emlog emlog
  Oct 6, 2025
• Low 1.9
  CVE-2025-47786

  Emlog vulnerable to Stored Cross-site Scripting

  Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that allows any registered user to construct malicious JavaScript, inducing all website users to click. In `/admin/comment.php`, the parameter `per…

  emlog emlog
  May 15, 2025