EEmlog

Products

Exploited and recent CVEs

• CVE-2026-73848 Medium 6.9 Emlog: Stored XSS via Tag Name in Article Editor 0.4%
• CVE-2026-53757 Medium 6.9 Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE 0.5%
• CVE-2026-53758 High 8.7 Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized 0.4%
• CVE-2026-53756 Medium 4.9 Emlog Blind SQL Injection via Authentication Cookie 0.4%
• CVE-2026-73850 High 8.6 Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function 0.4%
• CVE-2026-73849 Critical 9.8 emlog allows unauthenticated reinstallation via `install.php?action=reinstall`. 0.7%
• CVE-2026-73847 Medium 6.8 Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover 0.2%
• CVE-2026-67598 High 7.4 Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php 0.3%
• CVE-2026-46687 High 7.7 Emlog Local File Inclusion (LFI) 0.4%
• CVE-2026-46686 High 8.5 Emlog Reflected Cross-Site Scripting 0.4%
• CVE-2026-42287 Critical 10.0 Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions 0.2%
• CVE-2026-42286 High 8.4 Emlog: Cross-Site Request Forgery in Admin Functions 0.2%
• CVE-2026-41517 None 0.0 Emlog: Remote Code Execution via Malicious Plugin Upload 0.3%
• CVE-2026-34788 Medium 6.5 Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters 0.4%
• CVE-2026-34787 Medium 6.5 Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter 0.5%
• CVE-2026-34607 High 7.2 Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE 0.9%
• CVE-2026-34229 Medium 6.1 Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass 0.2%
• CVE-2026-34228 High 8.7 Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write 0.2%
• CVE-2026-31954 None 0.0 Emlog asynchronous media file deletion missing CSRF protection 0.2%
• CVE-2026-22799 Critical 9.3 emlog Arbitrary File Upload Vulnerability 0.7%
• CVE-2026-21433 High 7.7 Emlog vulnerable to Server-Side Request Forgery (SSRF) 0.3%
• CVE-2026-21432 Medium 6.8 Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO 0.2%
• CVE-2026-21431 Low 2.0 Emlog vulnerable to stored Cross-site Scripting via image name 0.2%
• CVE-2026-21430 High 7.0 Emlog: CSRF chained with stored XSS leads to ATO 0.2%
• CVE-2026-21429 Low 2.0 Emlog has Broken Access Control (BAC) 0.2%
• CVE-2025-62717 Low 2.7 Emlog Pro session verification code error due to clearing logic error 0.4%
• CVE-2025-61930 High 8.1 Emlog Pro has CSRF issue that Enables Admin Password Reset 0.2%
• CVE-2025-61769 Low 2.1 Emlog vulnerable to stored XSS in file upload functionality in emlog 0.3%
• CVE-2025-61599 Medium 5.1 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input 0.2%
• CVE-2025-61597 High 7.6 Emlog Pro is vulnerable to stored XSS attack through HTML template injection 0.2%