EUVD-2024-51147

Malicious code in bioql PyPI...

CVE-2024-12846: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-36674

LyLmespage v1.9.5 is vulnerable to Cross Site Scripting XSS via admin/link.php...

CVE-2024-36674: Improper Neutralization of Input During Web Page Generation

LyLmespage v1.9.5 is vulnerable to Cross Site Scripting XSS via admin/link.php...

CVE-2020-21321: Cross-Site Request Forgery (CSRF)

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...