3 matches found
CVE-2026-31954
Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...
7.3CVSS5.8AI score0.0015EPSS
SaveExploits1References1
EUVD-2026-11319
Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...
5.8AI score0.0015EPSS
SaveExploits1References1
CVE-2026-31954 Emlog asynchronous media file deletion missing CSRF protection
Emlog is an open source website building system. In 2.6.6 and earlier, the deleteasync action asynchronous delete lacks a call to LoginAuth::checkToken, enabling CSRF attacks...
0.0015EPSS
SaveExploits1References1
20