Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-61318 EUVD-2025-201728GHSA-4r29-3qq2-w2vw

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin…

Published Dec 8, 2025 · Updated Dec 8, 2025 · Assigned by mitre

Description

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.

References