CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

543 matches found

Rapid7 Vulnerability Database (full)•added 2025/10/10 12:00 a.m.•5 views

CVE-2025-61930: Cross-Site Request Forgery (CSRF)

Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery CSRF on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without...

8.8CVSS5.7AI score0.00216EPSS

SaveExploits1References1

CNNVD•added 2025/10/10 12:00 a.m.•13 views

Emlog Pro 跨站请求伪造漏洞

Emlog Pro is an Emlog open source blogging system. A cross-site request forgery vulnerability exists in Emlog Pro version 2.5.19 and earlier versions, which stems from a cross-site request forgery in the password change endpoint that could lead to a privileged user account takeover...

8.8CVSS6.7AI score0.00216EPSS

SaveExploits1References1

RedhatCVE•added 2025/10/04 7:07 a.m.•25 views

CVE-2025-61599

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...

5.1CVSS5.6AI score0.00203EPSS

SaveExploits1References1

RedhatCVE•added 2025/10/04 12:57 a.m.•24 views

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

6.1CVSS6AI score0.00228EPSS

SaveExploits1References1

RedhatCVE•added 2025/10/04 12:56 a.m.•24 views

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

5.9CVSS5.8AI score0.00257EPSS

SaveExploits1References1