25 matches found
CVE-2025-5886
A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument activepost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2025-5886
A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument activepost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2025-5886: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument activepost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed ...
The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system allows attackers to execute XSS attacks.
The vulnerability of the /admin/article.php file of the Subpage Handler component of the Emlog Pro CMS system relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...
CVE-2025-25823
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
PT-2025-8724
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.4 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the article header at the "/admin/article.php" API endpoint. Recommendations For...
CVE-2025-25823: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
CVE-2024-57599: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php...
CVE-2024-13132
A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...
CVE-2024-13140: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...
CVE-2024-13132: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...
CVE-2023-41619
Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...
CVE-2023-41619: Improper Neutralization of Input During Web Page Generation
Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...
PT-2024-12947
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.1.14 Description A cross-site scripting XSS issue was discovered in Emlog Pro via the component "/admin/article.php?action=write". This allows for potential XSS attacks. Recommendations For Emlog Pro version 2.1.14, conside...
PT-2023-28002
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.1.14 Description A reflective cross-site scripting XSS issue was discovered in Emlog Pro. The vulnerability is exploited via the /admin/article.php?active savedraft component. This allows for potential XSS attacks...
CVE-2023-41618
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...
CVE-2023-30205: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the uniqueid parameter in /admin/article.php...
CVE-2022-37111
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...
