EUVD-2025-13832

Malicious code in bioql PyPI...

EUVD-2023-56131

Malicious code in bioql PyPI...

EUVD-2024-3566

Malicious code in bioql PyPI...

EUVD-2022-44861

Malicious code in bioql PyPI...

EUVD-2024-35230

Malicious code in bioql PyPI...

EUVD-2025-22141

Malicious code in bioql PyPI...

EUVD-2022-45897

Malicious code in bioql PyPI...

EUVD-2024-52104

Malicious code in bioql PyPI...

EUVD-2025-13851

Malicious code in bioql PyPI...

EUVD-2022-44009

Malicious code in bioql PyPI...

EUVD-2023-1797

Malicious code in bioql PyPI...

EUVD-2023-30254

Malicious code in bioql PyPI...

EUVD-2022-27937

Malicious code in bioql PyPI...

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597

CVE-2025-61597 (Emlog) is a stored XSS vulnerability in Emlog 2.5.21 and earlier caused by HTML template injection in the mail template settings. In an authenticated admin session, saving a malicious payload can cause attacker‑controlled JavaScript to execute on subsequent visits to the settings ...

CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

PT-2025-40525

Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.19 Description A stored Cross-Site Scripting XSS issue has been identified. The vulnerability is located in the email template configuration component at the /admin/setting.php?action=mail API endpoint. This allows...