PT-2022-15963

Name of the Vulnerable Software and Affected Versions Emlog version 6.0 Description A SQL injection issue was found in Emlog via the TagID parameter of the getblogidsfromtagid function. Recommendations For Emlog version 6.0, consider restricting access to the getblogidsfromtagid function until a...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

Cross site scripting

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

CVE-2022-23872

Summary (CVE-2022-23872) : The vulnerability affects Emlog Pro v1.1.1, in the /admin/configure.php component via the footer_info parameter, causing a stored cross-site scripting (XSS) issue. The root cause is improper validation/handling of client-side data in that parameter, allowing scripted co...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL-based CMS website builder from Emlog personal developers. Emlog suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could use this vulnerability to execute JavaScript code ...

CVE-2022-23872: Improper Neutralization of Input During Web Page Generation

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-03214)

Emlog is a PHP and MySQL-based blog and content knowledge management system that seeks a fast, stable, simple and comfortable website building experience. a cross-site scripting vulnerability exists in Emlog pro-1.0.7 and prior versions. The vulnerability stems from the fact that Emlog does not...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2021-44584

CVE-2021-44584 is an XSS vulnerability in emlog, exploitable in index.php for versions

CVE-2021-44584

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

PT-2022-12175

Name of the Vulnerable Software and Affected Versions emlog versions pro-1.0.7 and earlier Description The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the s parameter in the index.php file. This can be exploited by...

CVE-2021-44584: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in emlog version = pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter...