Vulnerabilities in Emlog

33 results
Vexday analysis

Emlog apresenta perfil de risco mínimo com apenas 1 vulnerabilidade registrada na base, sem evidências de exploração ativa (KEV) ou classificação crítica. A fraqueza identificada (CWE-74 - Improper Neutralization of Special Elements) é de natureza moderada e não há atividade recente de disclosure, indicando que o fornecedor não é alvo prioritário de campanhas de ataque.

CVE-2025-47786LOWEmlog vulnerable to Stored Cross-site ScriptingEPSS 0.2%CVE-2026-34229MEDIUMEmlog: Stored XSS in Comment Module via URI Scheme Validation BypassEPSS 0.2%CVE-2025-61597HIGHEmlog Pro is vulnerable to stored XSS attack through HTML template injectionEPSS 0.2%CVE-2026-21429LOWEmlog has Broken Access Control (BAC)EPSS 0.2%CVE-2025-61930HIGHEmlog Pro has CSRF issue that Enables Admin Password ResetEPSS 0.2%CVE-2025-61599MEDIUMEmlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown InputEPSS 0.2%CVE-2026-34228HIGHEmlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File WriteEPSS 0.2%CVE-2026-21431LOWEmlog vulnerable to stored Cross-site Scripting via image nameEPSS 0.2%CVE-2026-21432MEDIUMEmlog has stored Cross-site Scripting issue that can lead to admin or another account ATOEPSS 0.2%CVE-2026-42286HIGHEmlog: Cross-Site Request Forgery in Admin FunctionsEPSS 0.2%CVE-2026-67598CRITICALEmlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.phpEPSS 0.2%CVE-2026-21430HIGHEmlog: CSRF chained with stored XSS leads to ATOEPSS 0.2%CVE-2026-31954NONEEmlog asynchronous media file deletion missing CSRF protectionEPSS 0.1%