CVE-2025-25818

A cross-site scripting (XSS) vulnerability exists in Emlog Pro v2.5.4 , a PHP and MySQL based CMS website builder. The flaw originates from the postStrVar function at the article_save.php endpoint, where an attacker can inject a crafted payload to execute arbitrary web scripts or HTML. No specifi...