CVE-2026-53758

Emlog versions 2.6.29 and prior are affected by a stored cross-site scripting (XSS) vulnerability. Article content is processed by the Parsedown Markdown parser without enabling safe mode, allowing raw HTML—including [removed] tags—embedded in Markdown to pass through unescaped and rendered with ...