Medium · 5.4 CVE-2024-31612 EUVD-2024-29487GHSA-v437-m266-vxr7

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access admini…

Published Jun 10, 2024 · Updated Aug 19, 2024 · Assigned by mitre

Description

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information.

References

https://github.com/ss122-0ss/cms/blob/main/emlog-csrf.md