429 matches found
CVE-2024-3763 Emlog Pro Post Tag tag.php cross site scripting
A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-3763 Emlog Pro Post Tag tag.php cross site scripting
A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting
A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
CVE-2024-3762
Summary: CVE-2024-3762 affects Emlog Pro 2.2.10, specifically the Whisper Page component’s /admin/twitter.php. The issue is a cross-site scripting vulnerability that can be exploited remotely. Public disclosure exists (VDB-260602). Vendor response noted as absent. Technical details from connected...
CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting
A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting
A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
PT-2024-27676 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.10 Description: A vulnerability was found in the file /admin/twitter.php of the component Whisper Page, leading to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this...
CVE-2024-31013
Cross Site Scripting XSS vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the bottom of the homepage in footerinfo parameter...
CVE-2024-25381
There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...
Cross site scripting
There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...
PT-2024-20909 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.8 Description: The issue is related to a Stored XSS vulnerability in the article publishing feature, caused by the non-filtering of quoted content. Recommendations: For Emlog Pro version 2.2.8, update to a newer version...
CVE-2024-25381
There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...
CVE-2024-25381
There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...
CVE-2024-25381
There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...
emlog Security Vulnerabilities
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A security vulnerability exists in emlog Pro version 2.2.8, which stems from unfiltered quoted content. The vulnerability can be exploited by attackers to perform cross-site scripting attacks...
CVE-2024-25381
CVE-2024-25381 : A stored XSS vulnerability exists in Emlog Pro 2.2.8 Article Publishing due to non-filtering of quoted content. Affected component: article publishing feature in Emlog Pro 2.2.8. Root cause: input containing quoted content is not properly sanitized, enabling injection of script t...
CVE-2023-41619
Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...
Cross site scripting
Emlog Pro v2.1.14 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/article.php?action=write...