Vulnerabilities

TI-2026-51871 CVE-2026-73848

Emlog: Stored XSS via Tag Name in Article Editor

LOW 37

Emlog is an open source website building system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00444 Published 2026-09-04 No fix listed CWE-79

TI-2026-38764 CVE-2026-53757

Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE

LOW 31

Emlog is an open source website building system.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00468 Published 2026-09-04 No fix listed CWE-22

TI-2026-38765 CVE-2026-53758

Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized

HIGH 77

Emlog is an open source website building system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00436 Published 2026-09-04 No fix listed CWE-79

TI-2026-38763 CVE-2026-53756

Emlog Blind SQL Injection via Authentication Cookie

MEDIUM 56

Emlog is an open source website building system.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00428 Published 2026-09-04 Fixed in 2.6.16 CWE-89

TI-2026-51873 CVE-2026-73850

Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function

HIGH 72

Emlog is an open source website building system.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00369 Published 2026-08-14 No fix listed CWE-89

TI-2026-51872 CVE-2026-73849

emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

HIGH 82

Emlog is an open source website building system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2026-08-14 No fix listed CWE-306

TI-2026-51870 CVE-2026-73847

Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

HIGH 65

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00218 Published 2026-08-14 No fix listed CWE-1275

TI-2026-47758 CVE-2026-67598 · GHSA-j63f-h5jj-qrf5

Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

HIGH 74

Emlog Pro through 2.6.23 contains a disabled TLS certificate validation vulnerability in include/service/ai.php that allows network-adjacent attackers to intercept outbound HTTPS requests to configured LLM providers by p…

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00259 Published 2026-08-03 No fix listed CWE-295

TI-2026-34318 CVE-2026-46687

Emlog Local File Inclusion (LFI)

HIGH 69

Emlog is an open source website building system.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00437 Published 2026-07-16 No fix listed CWE-24

TI-2026-34317 CVE-2026-46686

Emlog Reflected Cross-Site Scripting

HIGH 72

Emlog is an open source website building system.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00444 Published 2026-07-16 No fix listed CWE-79

TI-2026-28292 CVE-2026-39276 · GHSA-w926-pxjj-3c5v

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability…

HIGH 67

The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00782 Published 2026-05-29 No fix listed CWE-22

TI-2026-30598 CVE-2026-42287

Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions

HIGH 82

Emlog is an open source website building system.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00249 Published 2026-05-08 Fixed in 2.6.11 CWE-89

TI-2026-30597 CVE-2026-42286

Emlog: Cross-Site Request Forgery in Admin Functions

HIGH 70

Emlog is an open source website building system.

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00165 Published 2026-05-08 Fixed in 2.6.11 CWE-352

TI-2026-30100 CVE-2026-41517

Emlog: Remote Code Execution via Malicious Plugin Upload

LOW 3

Emlog is an open source website building system.

CVSS 4.0N/A 0.0 Network No auth No interaction EPSS 0.00276 Published 2026-05-08 Fixed in 2.6.11 CWE-434

TI-2026-27032 CVE-2026-34788

Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters

MEDIUM 64

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00356 Published 2026-04-03 No fix listed CWE-89

TI-2026-27031 CVE-2026-34787

Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter

MEDIUM 64

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00531 Published 2026-04-03 No fix listed CWE-98

TI-2026-26854 CVE-2026-34607

Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE

HIGH 67

Emlog is an open source website building system.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0089 Published 2026-04-03 No fix listed CWE-22

TI-2026-26524 CVE-2026-34229

Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass

MEDIUM 60

Emlog is an open source website building system.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00239 Published 2026-04-03 Fixed in 2.6.8 CWE-79

TI-2026-26523 CVE-2026-34228

Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write

HIGH 71

Emlog is an open source website building system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00195 Published 2026-04-03 Fixed in 2.6.8 CWE-352

TI-2026-24498 CVE-2026-31954

Emlog asynchronous media file deletion missing CSRF protection

HIGH 65

Emlog is an open source website building system.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00175 Published 2026-03-11 No fix listed CWE-352

TI-2026-18317 CVE-2026-22799

emlog Arbitrary File Upload Vulnerability

HIGH 81

Emlog is an open source website building system.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00745 Published 2026-01-12 No fix listed CWE-434

TI-2026-17318 CVE-2026-21433

Emlog vulnerable to Server-Side Request Forgery (SSRF)

LOW 34

Emlog is an open source website building system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00319 Published 2026-01-02 No fix listed CWE-918

TI-2026-17317 CVE-2026-21432

Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

LOW 29

Emlog is an open source website building system.

CVSS 4.0MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-02 No fix listed CWE-79

TI-2026-17316 CVE-2026-21431

Emlog vulnerable to stored Cross-site Scripting via image name

LOW 10

Emlog is an open source website building system.

CVSS 4.0LOW 2.0 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-02 No fix listed CWE-79

TI-2026-17315 CVE-2026-21430

Emlog: CSRF chained with stored XSS leads to ATO

LOW 36

Emlog is an open source website building system.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00185 Published 2026-01-02 No fix listed CWE-352

Vulnerabilities

Filters