Emlog

Emlog

103 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-60448

Exploit
  • EPSS 0.21%
  • Veröffentlicht 03.10.2025 00:00:00
  • Zuletzt bearbeitet 08.10.2025 15:21:30

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files...

9.8

CVE-2025-9296

Exploit
  • EPSS 0.41%
  • Veröffentlicht 21.08.2025 11:32:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in Emlog Pro up to 2.5.18. This affects an unknown function of the file /admin/blogger.php?action=update_avatar. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch...

7.2

CVE-2025-44139

Exploit
  • EPSS 0.67%
  • Veröffentlicht 01.08.2025 00:00:00
  • Zuletzt bearbeitet 05.07.2026 01:21:40

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zip

6.1

CVE-2025-53926

Exploit
  • EPSS 0.32%
  • Veröffentlicht 16.07.2025 15:37:44
  • Zuletzt bearbeitet 14.08.2025 20:37:42

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the comment and comname parameters. Reflected XSS r...

5.4

CVE-2025-53925

Exploit
  • EPSS 0.26%
  • Veröffentlicht 16.07.2025 14:21:42
  • Zuletzt bearbeitet 14.08.2025 20:38:06

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an ...

4.8

CVE-2025-53924

Exploit
  • EPSS 0.27%
  • Veröffentlicht 16.07.2025 13:55:57
  • Zuletzt bearbeitet 18.07.2025 15:15:28

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the siteurl parameter. It is possible...

6.1

CVE-2025-53923

Exploit
  • EPSS 0.35%
  • Veröffentlicht 16.07.2025 13:53:11
  • Zuletzt bearbeitet 22.07.2025 15:15:37

Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Due to lack of sanitization ...

4.1

CVE-2025-5886

Exploit
  • EPSS 0.34%
  • Veröffentlicht 09.06.2025 16:00:16
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument active_post leads to cross site scripting. The attack may be ini...

9.8

CVE-2025-5119

Exploit
  • EPSS 0.5%
  • Veröffentlicht 23.05.2025 21:00:11
  • Zuletzt bearbeitet 10.06.2025 19:34:07

A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical. This vulnerability affects unknown code of the file /include/controller/api_controller.php. The manipulation of the argument tag leads to sql injection. The attack can be ...

4.8

CVE-2025-47786

Exploit
  • EPSS 0.25%
  • Veröffentlicht 15.05.2025 19:33:24
  • Zuletzt bearbeitet 12.06.2025 16:39:25

Emlog is an open source website building system. Version 2.5.13 has a stored cross-site scripting vulnerability that allows any registered user to construct malicious JavaScript, inducing all website users to click. In `/admin/comment.php`, the param...