emlog 安全漏洞

emlog is emlog open source a PHP and MySQL based CMS website building system. A security vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient cleanup of the siteurl parameter, and could lead to an authenticated remote attacker injecting stored cross-site...