Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-21431 EUVD-2026-0756

Emlog vulnerable to stored Cross-site Scripting via image name

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by GitHub_M

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available.

Affected products

VendorProductAffectedFixed
emlog emlog = 2.5.23 —

References