Lucene search
+L

967 matches found

Prion
Prion
added 2024/02/21 7:15 p.m.20 views

Cross site scripting

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

6AI score0.0038EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/21 12:00 a.m.12 views

PT-2024-20909 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.8 Description: The issue is related to a Stored XSS vulnerability in the article publishing feature, caused by the non-filtering of quoted content. Recommendations: For Emlog Pro version 2.2.8, update to a newer version...

6.1CVSS5.3AI score0.0038EPSS
SaveExploits1References7
OSV
OSV
added 2024/02/21 12:00 a.m.15 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

6.1CVSS5.7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/02/21 12:00 a.m.13 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

5.9AI score0.0038EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/02/21 12:00 a.m.34 views

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

5.8AI score0.0038EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/02/21 12:00 a.m.11 views

emlog Security Vulnerabilities

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A security vulnerability exists in emlog Pro version 2.2.8, which stems from unfiltered quoted content. The vulnerability can be exploited by attackers to perform cross-site scripting attacks...

6.1CVSS6.2AI score0.0038EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/21 12:00 a.m.58 views

CVE-2024-25381

CVE-2024-25381 : A stored XSS vulnerability exists in Emlog Pro 2.2.8 Article Publishing due to non-filtering of quoted content. Affected component: article publishing feature in Emlog Pro 2.2.8. Root cause: input containing quoted content is not properly sanitized, enabling injection of script t...

6.1CVSS5.7AI score0.0038EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2024/01/16 1:15 a.m.29 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.1CVSS6.1AI score0.0045EPSS
SaveExploits1References2
Prion
Prion
added 2024/01/16 1:15 a.m.22 views

Cross site scripting

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

5.8CVSS6.3AI score0.0045EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/16 12:00 a.m.15 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/16 12:00 a.m.13 views

emlog Security Vulnerabilities

emlog is emlog personal developer of a set of PHP and MySQL based CMS site building system. A security vulnerability exists in emlog version v2.1.14, which stems from a cross-site scripting XSS vulnerability in component /admin/article.php...

6.1CVSS5.8AI score0.0045EPSS
SaveExploits1References3
CVE
CVE
added 2024/01/16 12:00 a.m.49 views

CVE-2023-41619

Affected product: Emlog Pro. The CVE-2023-41619 entry is about a cross-site scripting (XSS) vulnerability in the web admin interface. Specifically, the vulnerability exists in the component /admin/article.php?action=write (within Emlog Pro v2.1.14). The available connected sources confirm the iss...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/01/16 12:00 a.m.37 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.2AI score0.0045EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/16 12:00 a.m.27 views

CVE-2023-41619

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...

6.1CVSS6.2AI score
SaveExploits0References4
CNVD
CNVD
added 2023/12/18 12:00 a.m.18 views

Emlog Pro Cross-Site Scripting Vulnerability

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

6.1CVSS6.3AI score0.00475EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/12/15 12:00 a.m.66 views

Unspecified Vulnerability in Emlog (CNVD-2023-9918065)

emlog is a PHP and MySQL based CMS builder for emlog personal developers. Emlog pro2.1.14 version of a security vulnerability, the vulnerability stems from the uid parameter in /admin/media.php contains SQL injection vulnerability. Attackers can use this vulnerability to gain unauthorized access ...

7.2CVSS8.1AI score0.0084EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/14 12:15 a.m.8 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS5.7AI score0.00475EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/14 12:15 a.m.25 views

CVE-2023-41618

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

6.1CVSS0.00475EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/14 12:15 a.m.20 views

Cross site scripting

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...

5.8CVSS6.3AI score0.00475EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.10 views

Emlog 安全漏洞

emlog is a PHP and MySQL based CMS builder. Emlog Pro v2.1.14 version of a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the component /admin/article.php?activesavedraft, which can be exploited by an attacker...

6.1CVSS6.2AI score0.00475EPSS
SaveExploits1References2
Rows per page
Query Builder