CVE-2024-3762

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2024-3762

Summary: CVE-2024-3762 affects Emlog Pro 2.2.10, specifically the Whisper Page component’s /admin/twitter.php. The issue is a cross-site scripting vulnerability that can be exploited remotely. Public disclosure exists (VDB-260602). Vendor response noted as absent. Technical details from connected...

CVE-2024-3762 Emlog Pro Whisper Page twitter.php cross site scripting

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

CVE-2024-3762: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

PT-2024-27676 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.10 Description: A vulnerability was found in the file /admin/twitter.php of the component Whisper Page, leading to cross site scripting. The attack can be initiated remotely. The vendor was contacted early about this...

PT-2024-27685

Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.2.10 Description A issue was found in the Post Tag Handler component, specifically in the file /admin/tag.php. This leads to cross site scripting, which can be initiated remotely. Recommendations For Emlog Pro version 2.2.1...

CVE-2024-3763: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-31013

Cross Site Scripting XSS vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the bottom of the homepage in footerinfo parameter...

CVE-2024-31013

Cross Site Scripting XSS vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the bottom of the homepage in footerinfo parameter...

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

Cross site scripting

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

emlog Security Vulnerabilities

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A security vulnerability exists in emlog Pro version 2.2.8, which stems from unfiltered quoted content. The vulnerability can be exploited by attackers to perform cross-site scripting attacks...

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

CVE-2024-25381

A Stored XSS vulnerability exists in Emlog Pro version 2.2.8 within the Article Publishing feature. The root cause is the non-filtering of quoted content , which allows attackers to execute malicious scripts in the context of the victim's browser. While the impact is categorized as a medium sever...

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

PT-2024-20909 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.8 Description: The issue is related to a Stored XSS vulnerability in the article publishing feature, caused by the non-filtering of quoted content. Recommendations: For Emlog Pro version 2.2.8, update to a newer version...

CVE-2024-25381: Improper Neutralization of Input During Web Page Generation

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...

CVE-2024-25381

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content...