1218 matches found
CVE-2025-61769 Emlog vulnerable to stored XSS in file upload functionality in emlog
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
PT-2025-40911
Name of the Vulnerable Software and Affected Versions Emlog versions up to and including 2.5.22 Description A cross-site scripting XSS issue exists in Emlog, potentially allowing authenticated remote attackers to inject arbitrary web script or HTML. This is possible through the file upload...
CVE-2025-61769: Improper Neutralization of Input During Web Page Generation
Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including version 2.5.22 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload...
Emlog 安全漏洞
Emlog is emlog open source a PHP and MySQL based CMS website builder. A security vulnerability exists in Emlog 2.5.22 and previous versions, the vulnerability stems from the file upload function does not validate the input, which may lead to cross-site scripting attacks...
CVE-2025-61599
Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...
CVE-2025-60448
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...
CVE-2025-60447
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...
EUVD-2024-32335
Malicious code in bioql PyPI...
EUVD-2025-14802
Malicious code in bioql PyPI...
EUVD-2024-51373
Malicious code in bioql PyPI...
EUVD-2022-28458
Malicious code in bioql PyPI...
EUVD-2025-32297
Malicious code in bioql PyPI...
EUVD-2025-32224
Malicious code in bioql PyPI...
EUVD-2025-25414
Malicious code in bioql PyPI...
EUVD-2025-21698
Malicious code in bioql PyPI...
EUVD-2025-23362
Malicious code in bioql PyPI...
EUVD-2025-21725
Malicious code in bioql PyPI...
EUVD-2025-28395
Malicious code in bioql PyPI...