Lucene search
+L

421 matches found

NVD
NVD
added 2024/02/21 7:15 p.m.17 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

6.1CVSS5.6AI score0.0038EPSS
SaveExploits1References2
Prion
Prion
added 2024/02/21 7:15 p.m.16 views

Cross site scripting

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

6AI score0.0038EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/21 12:0 a.m.7 views

PT-2024-20909 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.8 Description: The issue is related to a Stored XSS vulnerability in the article publishing feature, caused by the non-filtering of quoted content. Recommendations: For Emlog Pro version 2.2.8, update to a newer version...

6.1CVSS5.3AI score0.0038EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/02/21 12:0 a.m.6 views

emlog Security Vulnerabilities

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A security vulnerability exists in emlog Pro version 2.2.8, which stems from unfiltered quoted content. The vulnerability can be exploited by attackers to perform cross-site scripting attacks...

6.1CVSS6.2AI score0.0038EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/02/21 12:0 a.m.21 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

5.8AI score0.0038EPSS
SaveExploits1References2
CVE
CVE
added 2024/02/21 12:0 a.m.50 views

CVE-2024-25381

CVE-2024-25381 : A stored XSS vulnerability exists in Emlog Pro 2.2.8 Article Publishing due to non-filtering of quoted content. Affected component: article publishing feature in Emlog Pro 2.2.8. Root cause: input containing quoted content is not properly sanitized, enabling injection of script t...

6.1CVSS5.7AI score0.0038EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/21 12:0 a.m.13 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

5.9AI score0.0038EPSS
SaveExploits1References2
OSV
OSV
added 2024/02/21 12:0 a.m.12 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

6.1CVSS5.7AI score0.0038EPSS
SaveExploits1References4
NVD
NVD
added 2024/01/16 1:15 a.m.25 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.1CVSS6.1AI score0.0045EPSS
SaveExploits1References2
Prion
Prion
added 2024/01/16 1:15 a.m.18 views

Cross site scripting

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

5.8CVSS6.3AI score0.0045EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 12:0 a.m.13 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
SaveExploits1References2
CVE
CVE
added 2024/01/16 12:0 a.m.43 views

CVE-2023-41619

Affected product: Emlog Pro. The CVE-2023-41619 entry is about a cross-site scripting (XSS) vulnerability in the web admin interface. Specifically, the vulnerability exists in the component /admin/article.php?action=write (within Emlog Pro v2.1.14). The available connected sources confirm the iss...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/01/16 12:0 a.m.28 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/16 12:0 a.m.23 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.1CVSS6.2AI score0.0045EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/12/18 12:0 a.m.14 views

Emlog Pro Cross-Site Scripting Vulnerability

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

6.1CVSS6.3AI score0.00475EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/14 12:15 a.m.7 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS5.7AI score0.00475EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/14 12:15 a.m.21 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS0.00475EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/14 12:15 a.m.18 views

Cross site scripting

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

5.8CVSS6.3AI score0.00475EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/12/13 11:15 p.m.7 views

CVE-2023-41621

A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...

6.1CVSS5.8AI score0.01146EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/13 11:15 p.m.17 views

CVE-2023-41621

A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...

6.1CVSS0.01146EPSS
SaveExploits1References1
Rows per page
Query Builder