emlog

Records106All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

emlog records in CISA KEV

No emlog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Emlog 93 records HIGH

Records

106 records

TI-2026-51872 CVE-2026-73849

emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

HIGH 82

Emlog is an open source website building system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2026-08-14 No fix listed CWE-306

TI-2026-30598 CVE-2026-42287

Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions

HIGH 82

Emlog is an open source website building system.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00249 Published 2026-05-08 Fixed in 2.6.11 CWE-89

TI-2025-21066 CVE-2025-29401 · GHSA-6xv7-g282-fw95

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro…

HIGH 82

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00766 Published 2025-03-19 No fix listed CWE-94

TI-2025-19139 CVE-2025-25783 · GHSA-2vg3-8hw9-v322

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro…

HIGH 82

An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00705 Published 2025-02-26 No fix listed CWE-434

TI-2023-24041 CVE-2023-44974 · GHSA-xpph-pf69-7f23

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro…

HIGH 82

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20418 Published 2023-10-03 No fix listed CWE-434

TI-2023-23173 CVE-2023-43291 · GHSA-97gg-2m4j-jj6q

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote…

HIGH 82

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01967 Published 2023-09-26 No fix listed CWE-502

TI-2026-18317 CVE-2026-22799

emlog Arbitrary File Upload Vulnerability

HIGH 81

Emlog is an open source website building system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00745 Published 2026-01-12 No fix listed CWE-434

TI-2025-30252 CVE-2025-47787

Emlog Pro Contains a File Upload Vulnerability

HIGH 80

Emlog is an open source website building system.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00766 Published 2025-05-15 Fixed in 2.5.10 CWE-434

TI-2026-38765 CVE-2026-53758

Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized

HIGH 77

Emlog is an open source website building system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00436 Published 2026-09-04 No fix listed CWE-79

TI-2026-47758 CVE-2026-67598 · GHSA-j63f-h5jj-qrf5

Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

HIGH 74

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by p…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00259 Published 2026-08-03 No fix listed CWE-295

TI-2025-30250 CVE-2025-47785

EMLOG SQL Injection Vulnerability

HIGH 73

Emlog is an open source website building system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00809 Published 2025-05-15 No fix listed CWE-89

TI-2025-21678 CVE-2025-30372

Emlog Pro contains an SQL injection vulnerability.

HIGH 73

Emlog is an open source website building system.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00558 Published 2025-03-28 No fix listed CWE-89

TI-2026-51873 CVE-2026-73850

Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function

HIGH 72

Emlog is an open source website building system.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00369 Published 2026-08-14 No fix listed CWE-89

TI-2026-34317 CVE-2026-46686

Emlog Reflected Cross-Site Scripting

HIGH 72

Emlog is an open source website building system.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00444 Published 2026-07-16 No fix listed CWE-79

TI-2025-37985 CVE-2025-61318 · GHSA-4r29-3qq2-w2vw

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

HIGH 72

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00728 Published 2025-12-08 No fix listed CWE-24

TI-2026-26523 CVE-2026-34228

Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write

HIGH 71

Emlog is an open source website building system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00195 Published 2026-04-03 Fixed in 2.6.8 CWE-352

TI-2025-38279 CVE-2025-61930

Emlog Pro has CSRF issue that Enables Admin Password Reset

HIGH 71

Emlog is an open source website building system.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00216 Published 2025-10-10 No fix listed CWE-352

TI-2026-30597 CVE-2026-42286

Emlog: Cross-Site Request Forgery in Admin Functions

HIGH 70

Emlog is an open source website building system.

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00165 Published 2026-05-08 Fixed in 2.6.11 CWE-352

TI-2025-04588 CVE-2025-5119 · GHSA-9q78-jg46-rwj6

Emlog Pro api_controller.php sql injection

HIGH 70

A vulnerability has been found in Emlog Pro 2.5.11 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0059 Published 2025-05-23 No fix listed CWE-74

TI-2026-34318 CVE-2026-46687

Emlog Local File Inclusion (LFI)

HIGH 69

Emlog is an open source website building system.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00437 Published 2026-07-16 No fix listed CWE-24

TI-2025-33788 CVE-2025-53923

Emlog vulnerable to reflected Cross-site Scripting in admin panel

HIGH 69

Emlog is an open source website building system.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00411 Published 2025-07-16 No fix listed CWE-79

TI-2026-28292 CVE-2026-39276 · GHSA-w926-pxjj-3c5v

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability…

HIGH 67

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00782 Published 2026-05-29 No fix listed CWE-22

TI-2026-26854 CVE-2026-34607

Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE

HIGH 67

Emlog is an open source website building system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0089 Published 2026-04-03 No fix listed CWE-22

TI-2025-28596 CVE-2025-44139 · GHSA-q2v9-7453-3jwf

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via…

HIGH 67

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upload_zip

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00793 Published 2025-08-01 No fix listed CWE-434

TI-2025-19155 CVE-2025-25823 · GHSA-j8h4-gqcq-8cwq

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to…

HIGH 67

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php.

CVSS 3.1HIGH 7.3 Local No auth User interaction EPSS 0.0019 Published 2025-02-26 No fix listed CWE-79

Open these records in search →