Description
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at article_save.php.
Medium · 5.1
CVE-2025-25818
EUVD-2025-5344GHSA-f5q7-wc42-9m26
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cr…
Published Feb 26, 2025 · Updated Jul 5, 2026 · Assigned by mitre