CVE-2025-25827

A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...

CVE-2025-25823

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...

CVE-2025-25827

A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...

Emlog Pro Cross-Site Scripting Vulnerability (CNVD-2025-01706)

Emlog Pro is a lightweight blogging system that provides easy-to-use blog management features. A cross-site scripting vulnerability exists in Emlog Pro 2.4.3. The vulnerability originates from unknown functionality in the file /admin/twitter.php of the Subpage Handler component. An attacker can...

CVE-2024-13140

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-13140 Emlog Pro Cover Upload article.php cross site scripting

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-13140

CVE-2024-13140 affects Emlog Pro up to 2.4.3. A cross-site scripting vulnerability exists in the Cover Upload Handler, triggered by manipulating the image parameter in /admin/article.php?action=upload_cover. The flaw is exploitable remotely; public exploit appears in sources. Connected data confi...

CVE-2024-13140 Emlog Pro Cover Upload article.php cross site scripting

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-13140 Emlog Pro Cover Upload article.php cross site scripting

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...

CVE-2024-13135

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-13135 Emlog Pro Subpage twitter.php cross site scripting

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-13135

CVE-2024-13135 affects Emlog Pro 2.4.3, specifically the unknown functionality in the file /admin/twitter.php of the Subpage Handler . The issue enables cross-site scripting and can be exploited remotely; the exploit has been disclosed publicly. Multiple sources confirm the affected component but...

CVE-2024-13135 Emlog Pro Subpage twitter.php cross site scripting

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-13135 Emlog Pro Subpage twitter.php cross site scripting

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The...

CVE-2024-13132

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13132 Emlog Pro Subpage article.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13132 Emlog Pro Subpage article.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13132 Emlog Pro Subpage article.php cross site scripting

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-13132

CVE-2024-13132 affects Emlog Pro up to version 2.4.3. The vulnerability is in the Subpage Handler’s /admin/article.php, enabling remote cross-site scripting (XSS) via manipulated input. Public exploit has been disclosed. Trusted details from connected sources indicate the impact is limited to XSS...

emlog 代码注入漏洞

Emlog Pro is a lightweight blogging system that provides easy-to-use blog management features. A cross-site scripting vulnerability exists in Emlog Pro 2.4.3. The vulnerability originates from unknown functionality in the file /admin/twitter.php of the Subpage Handler component. An attacker can...