Description
Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| emlog | emlog | = 2.5.23 | — |