CVE-2024-12846

CVE-2024-12846 affects Emlog Pro up to version 2.4.1. The vulnerability lies in the /admin/link.php file where manipulating the siteurl/icon parameter enables cross-site scripting. The issue is exploitable remotely and, according to sources in the connected documents, the exploit has been disclos...