1218 matches found
CVE-2025-61769
CVE-2025-61769 concerns Emlog, an open source PHP/MySQL CMS. The issue is a cross-site scripting (XSS) vulnerability present in Emlog up to and including version 2.5.22, exploitable via the file upload function where an authenticated user can upload an SVG containing JavaScript that is later exec...
PT-2025-40911
Name of the Vulnerable Software and Affected Versions Emlog versions up to and including 2.5.22 Description A cross-site scripting XSS issue exists in Emlog, potentially allowing authenticated remote attackers to inject arbitrary web script or HTML. This is possible through the file upload...
Emlog 安全漏洞
Emlog is emlog open source a PHP and MySQL based CMS website builder. A security vulnerability exists in Emlog 2.5.22 and previous versions, the vulnerability stems from the file upload function does not validate the input, which may lead to cross-site scripting attacks...
CVE-2025-61769: Improper Neutralization of Input During Web Page Generation
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
CVE-2025-61599
Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...
CVE-2025-60448
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...
CVE-2025-60447
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...
EUVD-2024-32335
Malicious code in bioql PyPI...
EUVD-2025-14802
Malicious code in bioql PyPI...
EUVD-2024-51365
Malicious code in bioql PyPI...
EUVD-2024-51373
Malicious code in bioql PyPI...
EUVD-2022-28458
Malicious code in bioql PyPI...
EUVD-2022-28797
Malicious code in bioql PyPI...
EUVD-2024-46308
Malicious code in bioql PyPI...
EUVD-2024-46309
Malicious code in bioql PyPI...
EUVD-2025-28128
Malicious code in bioql PyPI...
EUVD-2024-51142
Malicious code in bioql PyPI...
EUVD-2024-28931
Malicious code in bioql PyPI...