CVE-2025-30372

creationtimestamp| type| source ---|---|--- 2025-03-28 17:45:12+00:00| seen| https://t.me/cvedetector/21435...

CVE-2025-30372 Emlog Pro contains an SQL injection vulnerability.

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. searchcontroller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potentia...