Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/01/03 6:59 p.m.2 views

CVE-2026-21432

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available...

8.2CVSS6.1AI score0.00022EPSS
Exploits1References1
NVD
NVD
added 2026/01/02 7:15 p.m.1 views

CVE-2026-21432

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available...

8.2CVSS0.00022EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/02 6:58 p.m.1 views

CVE-2026-21432 Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available...

8.2CVSS5.8AI score0.00022EPSS
Exploits1References1
CVE
CVE
added 2026/01/02 6:58 p.m.12 views

CVE-2026-21432

CVE-2026-21432 affects Emlog (open source PHP/MySQL CMS). A stored cross-site scripting vulnerability in version 2.5.23 can lead to account takeover, including admin accounts. Multiple trusted sources (NVD/Red Hat/CVE lists) state that as of publication there are no known patched versions availab...

8.2CVSS5.8AI score0.00022EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/02 6:49 p.m.0 views

CVE-2026-21431 Emlog vulnerable to stored Cross-site Scripting via image name

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the Resource media library function while publishing an article. As of time of publication, no known patched versions are available...

5.1CVSS5.8AI score0.00022EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/02 5:23 p.m.3 views

CVE-2026-21429 Emlog has Broken Access Control (BAC)

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available...

5.1CVSS6.4AI score0.00036EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/02 5:23 p.m.2 views

EUVD-2026-0752

Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after publishing them. As of time of publication, no known patched versions are available...

5.1CVSS6.3AI score0.00036EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/02 12:0 a.m.1 views

emlog 跨站脚本漏洞

emlog is emlog open source a PHP and MySQL based CMS site building system. A cross-site scripting vulnerability exists in emlog version 2.5.23, which stems from the presence of a stored cross-site scripting vulnerability that could lead to account takeover...

8.2CVSS5.8AI score0.00022EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.2 views

Emlog Pro 安全漏洞

Emlog Pro is an Emlog open source blogging system. A security vulnerability exists in Emlog Pro version 2.5.23, which stems from an error in the session CAPTCHA clearing logic that could lead to CAPTCHAs being reused...

9.1CVSS6.5AI score0.0007EPSS
Exploits0References1
Rows per page
Query Builder