Emlog vulnerabilities

Products

• Emlog 106
• Pro 13

Newest

• emlog Emlog: Stored XSS via Tag Name in Article Editor CVE-2026-73848 6.9 MediumSeptember 4, 2026
• emlog Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE CVE-2026-53757 6.9 MediumSeptember 4, 2026
• emlog Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized CVE-2026-53758 8.7 HighSeptember 4, 2026
• emlog Emlog Blind SQL Injection via Authentication Cookie CVE-2026-53756 4.9 MediumSeptember 4, 2026
• emlog Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function CVE-2026-73850 8.6 HighAugust 14, 2026
• emlog emlog allows unauthenticated reinstallation via `install.php?action=reinstall`. CVE-2026-73849 9.8 CriticalAugust 14, 2026
• emlog Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover CVE-2026-73847 Public exploit 6.8 MediumAugust 14, 2026
• emlog Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php CVE-2026-67598 Public exploit 9.1 CriticalAugust 3, 2026
• emlog Emlog Local File Inclusion (LFI) CVE-2026-46687 7.7 HighJuly 16, 2026
• emlog Emlog Reflected Cross-Site Scripting CVE-2026-46686 8.5 HighJuly 16, 2026
• emlog The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing... CVE-2026-39276 7.2 HighMay 29, 2026
• emlog Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions CVE-2026-42287 10.0 CriticalMay 8, 2026
• emlog Emlog: Cross-Site Request Forgery in Admin Functions CVE-2026-42286 8.4 HighMay 8, 2026
• emlog Emlog: Remote Code Execution via Malicious Plugin Upload CVE-2026-41517 0.0 NoneMay 8, 2026
• emlog Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters CVE-2026-34788 6.5 MediumApril 3, 2026
• emlog Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter CVE-2026-34787 6.5 MediumApril 3, 2026
• emlog Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE CVE-2026-34607 7.2 HighApril 3, 2026
• emlog Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass CVE-2026-34229 6.1 MediumApril 3, 2026
• emlog Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write CVE-2026-34228 8.7 HighApril 3, 2026
• emlog Emlog asynchronous media file deletion missing CSRF protection CVE-2026-31954 0.0 NoneMarch 11, 2026
• emlog emlog Arbitrary File Upload Vulnerability CVE-2026-22799 9.3 CriticalJanuary 12, 2026
• emlog Emlog vulnerable to Server-Side Request Forgery (SSRF) CVE-2026-21433 7.7 HighJanuary 2, 2026
• emlog Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO CVE-2026-21432 6.8 MediumJanuary 2, 2026
• emlog Emlog vulnerable to stored Cross-site Scripting via image name CVE-2026-21431 2.0 LowJanuary 2, 2026
• emlog Emlog: CSRF chained with stored XSS leads to ATO CVE-2026-21430 7.0 HighJanuary 2, 2026
• emlog Emlog has Broken Access Control (BAC) CVE-2026-21429 2.0 LowJanuary 2, 2026
• emlog Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the... CVE-2025-61318 9.1 CriticalDecember 8, 2025
• emlog Emlog Pro session verification code error due to clearing logic error CVE-2025-62717 2.7 LowOctober 24, 2025
• emlog Emlog Pro has CSRF issue that Enables Admin Password Reset CVE-2025-61930 8.1 HighOctober 10, 2025
• emlog Emlog vulnerable to stored XSS in file upload functionality in emlog CVE-2025-61769 2.1 LowOctober 6, 2025
• emlog Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input CVE-2025-61599 5.1 MediumOctober 3, 2025
• emlog Emlog Pro is vulnerable to stored XSS attack through HTML template injection CVE-2025-61597 7.6 HighOctober 3, 2025
• emlog A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The... CVE-2025-60448 6.1 MediumOctober 3, 2025
• emlog A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The... CVE-2025-60447 5.9 MediumOctober 3, 2025
• emlog Emlog Pro blogger.php unrestricted upload CVE-2025-9296 5.1 MediumAugust 21, 2025
• emlog Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog... CVE-2025-44139 7.2 HighAugust 1, 2025
• emlog Emlog has Stored Cross-site Scripting vulnerability due to error CVE-2025-53926 6.1 MediumJuly 16, 2025
• emlog Emlog has Stored Cross-site Scripting vulnerability in file upload functionality CVE-2025-53925 5.4 MediumJuly 16, 2025
• emlog Emlog vulnerable to stored Cross-site Scripting in links functionality CVE-2025-53924 6.9 MediumJuly 16, 2025
• emlog Emlog vulnerable to reflected Cross-site Scripting in admin panel CVE-2025-53923 8.2 HighJuly 16, 2025
• emlog Emlog article.php cross site scripting CVE-2025-5886 5.1 MediumJune 9, 2025
• emlog, emlog pro +1 more Emlog Pro api_controller.php sql injection CVE-2025-5119 6.9 MediumMay 23, 2025
• emlog Emlog vulnerable to Stored Cross-site Scripting CVE-2025-47786 1.9 LowMay 15, 2025
• emlog EMLOG SQL Injection Vulnerability CVE-2025-47785 8.3 HighMay 15, 2025
• emlog Emlog Pro Contains a File Upload Vulnerability CVE-2025-47787 8.9 HighMay 15, 2025
• emlog Emlog vulnerable to Deserialization of Untrusted Data CVE-2025-47784 6.6 MediumMay 15, 2025
• emlog Emlog Pro contains an SQL injection vulnerability. CVE-2025-30372 7.7 HighMarch 28, 2025
• emlog An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0... CVE-2025-29405 6.3 MediumMarch 19, 2025
• emlog An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7... CVE-2025-29401 9.8 CriticalMarch 19, 2025
• emlog A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows... CVE-2025-25827 6.8 MediumFebruary 26, 2025
• Show olderLoading…