← volver
CVE-2026-21432

Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

CVSS 6.8 MEDIUMEPSS 0.2%CWE-79
Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:P
Productos afectados
emlog · emlog

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →