CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

PT-2022-26877 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 1.7.1 Description: A reflected cross-site scripting XSS issue was found in Emlog Pro at the "/admin/store.php" API endpoint. This allows for potential malicious script injection and execution. Recommendations: For Emlog Pro...

CVE-2022-43372

CVE-2022-43372 affects Emlog Pro 1.7.1. The connected sources confirm a reflected cross-site scripting (XSS) vulnerability at the /admin/store.php endpoint. The vulnerability is evidenced by a confirmed issue in PT-2022-26877 describing a reflected XSS in that API path, enabling potential script ...

CVE-2022-43372

Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting XSS vulnerability at /admin/store.php...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

Remote code execution

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

Emlog 代码问题漏洞

Emlog is a PHP and MySQL based CMS website builder by the individual developers of Emlog. A code issue vulnerability exists in Emlog Pro version 1.6.0 that stems from a remote code execution issue...

CVE-2022-42189

CVE-2022-42189 affects Emlog Pro 1.6.0 via the plugins upload functionality, described as a remote code execution (RCE) vulnerability. The CVSS 3.1 base score is 7.2 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: HIGH; no user interaction. The root cause and ex...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

Cross site scripting

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

CVE-2021-40610

CVE-2021-40610 affects Emlog Pro v1.0.4, with a cross-site scripting (XSS) vulnerability in the Emlog Pro backend management interface. The connected documents confirm the affected product and the vulnerability class but do not provide details on the root cause (e.g., specific input handling, sto...

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website builder by Emlog's personal developer. A security vulnerability exists in Emlog Pro v1.0.4, which stems from a cross-site scripting XSS issue in the Emlog Pro backend administration...

CVE-2022-1526

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...