CVE-2025-25818

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at articlesave.php...

CVE-2025-25823

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...

CVE-2025-25783

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25823: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...

CVE-2025-25818

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at articlesave.php...

CVE-2025-25783

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25825

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section...

CVE-2025-25825

A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section...

CVE-2025-25825

A cross-site scripting (XSS) vulnerability exists in Emlog Pro v2.5.4 , a PHP and MySQL based CMS website builder. The flaw allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Titile field within the article category section. This vulnerability is cha...

CVE-2025-25783: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25783

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25783

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-25827

A Server-Side Request Forgery (SSRF) vulnerability exists in the sort.php component of Emlog Pro v2.5.4 . This flaw allows an attacker to scan local and internal ports by providing a crafted URL . While a proof-of-concept has been published, specific exploit links are not provided in the document...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder for emlog personal developers. A security vulnerability exists in emlog Pro v2.5.4, which originates from the /admin/article.php file and is susceptible to cross-site scripting attacks...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder by emlog personal developer. A security vulnerability exists in emlog Pro version v2.5.4, which stems from vulnerability to cross-site scripting attacks...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder for emlog personal developers. A security vulnerability exists in emlog Pro version v2.5.4, which originates from the postStrVar function in articlesave.php and is vulnerable to cross-site scripting attacks...

PT-2025-8708

Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.3 Description The issue is related to an arbitrary file upload vulnerability in the admin/plugin.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted Zip file. Recommendation...

CVE-2025-25827: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...

PT-2025-8726

Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.4 Description A Server-Side Request Forgery SSRF issue in the sort.php component allows attackers to scan local and internal ports by supplying a crafted URL. Recommendations For Emlog Pro version 2.5.4, update to a newer...

CVE-2025-25827

A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...