4 matches found
CVE-2025-60448
A stored Cross-Site Scripting (XSS) vulnerability exists in Emlog Pro version 2.5.19 . The flaw is caused by insufficient validation of SVG file uploads within the /admin/media.php component. This allows an attacker to upload malicious SVG files containing JavaScript code , which will execute in ...
CVE-2025-9173
A weakness has been identified in Emlog Pro up to 2.5.18. This issue affects some unknown processing of the file /admin/media.php?action=upload=0. Executing manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available ...
CVE-2025-9173
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The file upload in include/service/media.php verifies the file extension based on a list defined in...
