966 matches found
CVE-2025-61769 Emlog vulnerable to stored XSS in file upload functionality in emlog
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
CVE-2025-61769 Emlog vulnerable to stored XSS in file upload functionality in emlog
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
EUVD-2025-32544
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
CVE-2025-61769
CVE-2025-61769 concerns Emlog, an open source PHP/MySQL CMS. The issue is a cross-site scripting (XSS) vulnerability present in Emlog up to and including version 2.5.22, exploitable via the file upload function where an authenticated user can upload an SVG containing JavaScript that is later exec...
Emlog 安全漏洞
Emlog is emlog open source a PHP and MySQL based CMS website builder. A security vulnerability exists in Emlog 2.5.22 and previous versions, the vulnerability stems from the file upload function does not validate the input, which may lead to cross-site scripting attacks...
PT-2025-40911
Name of the Vulnerable Software and Affected Versions Emlog versions up to and including 2.5.22 Description A cross-site scripting XSS issue exists in Emlog, potentially allowing authenticated remote attackers to inject arbitrary web script or HTML. This is possible through the file upload...
CVE-2025-61599
Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...
CVE-2025-60448
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...
CVE-2025-60447
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...
EUVD-2024-46309
Malicious code in bioql PyPI...
EUVD-2025-28395
Malicious code in bioql PyPI...
EUVD-2025-5346
Malicious code in bioql PyPI...
EUVD-2023-34760
Malicious code in bioql PyPI...
EUVD-2025-28128
Malicious code in bioql PyPI...
EUVD-2025-32296
Malicious code in bioql PyPI...
EUVD-2025-32224
Malicious code in bioql PyPI...
EUVD-2025-5345
Malicious code in bioql PyPI...
EUVD-2024-51368
Malicious code in bioql PyPI...