Vulnerabilities in emlog

33 results
Vexday analysis

O Emlog apresenta 31 vulnerabilidades registradas, com 2 classificadas como críticas, mas nenhuma atualmente sob ataque ativo segundo dados de exploração conhecida. A fraqueza dominante é injeção de código (CWE-79), concentrada principalmente em Cross-Site Scripting, e 5 vulnerabilidades foram publicadas nos últimos 90 dias, indicando risco moderado e em evolução que requer monitoramento contínuo.

CVE-2025-47786LOWEmlog vulnerable to Stored Cross-site ScriptingEPSS 0.2%CVE-2026-34229MEDIUMEmlog: Stored XSS in Comment Module via URI Scheme Validation BypassEPSS 0.2%CVE-2025-61597HIGHEmlog Pro is vulnerable to stored XSS attack through HTML template injectionEPSS 0.2%CVE-2026-21429LOWEmlog has Broken Access Control (BAC)EPSS 0.2%CVE-2025-61930HIGHEmlog Pro has CSRF issue that Enables Admin Password ResetEPSS 0.2%CVE-2025-61599MEDIUMEmlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown InputEPSS 0.2%CVE-2026-34228HIGHEmlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File WriteEPSS 0.2%CVE-2026-21431LOWEmlog vulnerable to stored Cross-site Scripting via image nameEPSS 0.2%CVE-2026-21432MEDIUMEmlog has stored Cross-site Scripting issue that can lead to admin or another account ATOEPSS 0.2%CVE-2026-42286HIGHEmlog: Cross-Site Request Forgery in Admin FunctionsEPSS 0.2%CVE-2026-67598CRITICALEmlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.phpEPSS 0.2%CVE-2026-21430HIGHEmlog: CSRF chained with stored XSS leads to ATOEPSS 0.2%CVE-2026-31954NONEEmlog asynchronous media file deletion missing CSRF protectionEPSS 0.1%