Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2023-41619

Disclosure Date: January 16, 2024 (last updated February 26, 2025)
Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write.
Attacker Value
Unknown

CVE-2023-41618

Disclosure Date: December 14, 2023 (last updated February 25, 2025)
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?active_savedraft.
Attacker Value
Unknown

CVE-2023-41621

Disclosure Date: December 13, 2023 (last updated February 25, 2025)
A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.
Attacker Value
Unknown

CVE-2023-41623

Disclosure Date: December 12, 2023 (last updated February 25, 2025)
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.
Attacker Value
Unknown

CVE-2023-43267

Disclosure Date: October 02, 2023 (last updated February 25, 2025)
A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.