Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-21432 EUVD-2026-0755

Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

Published Jan 2, 2026 · Updated Jan 5, 2026 · Assigned by GitHub_M

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.

Affected products

VendorProductAffectedFixed
emlog emlog = 2.5.23 —

References