Emlog Cross-Site Scripting Vulnerability (CNVD-2023-36305)

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in Emlog Pro v2.0.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary We...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

PT-2023-22642 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.0.3 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. This enables the execution of malicious scripts,...

CVE-2023-30338

CVE-2023-30338 affects Emlog Pro v2.0.3. Multiple stored XSS vulnerabilities allow attackers to execute arbitrary web scripts or HTML through crafted payloads in Article Title or Article Summary fields. Root cause cited across sources is lack of proper filtering/escaping of user input. Impact des...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

Emlog 跨站脚本漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in Emlog Pro v2.0.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary We...

CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

Cross site scripting

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

PT-2022-26877 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 1.7.1 Description: A reflected cross-site scripting XSS issue was found in Emlog Pro at the "/admin/store.php" API endpoint. This allows for potential malicious script injection and execution. Recommendations: For Emlog Pro...

CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

CVE-2022-43372

CVE-2022-43372 affects Emlog Pro 1.7.1. The connected sources confirm a reflected cross-site scripting (XSS) vulnerability at the /admin/store.php endpoint. The vulnerability is evidenced by a confirmed issue in PT-2022-26877 describing a reflected XSS in that API path, enabling potential script ...

CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

Remote code execution

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

CVE-2022-42189

CVE-2022-42189 affects Emlog Pro 1.6.0 via the plugins upload functionality, described as a remote code execution (RCE) vulnerability. The CVSS 3.1 base score is 7.2 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: HIGH; no user interaction. The root cause and ex...