NA - CVE-2025-25818 - A cross-site scripting (XSS) vulnerability in...
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at...
NA - CVE-2025-25823 - A cross-site scripting (XSS) vulnerability in...
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php.
NA - CVE-2025-25825 - A cross-site scripting (XSS) vulnerability in...
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category...
NA - CVE-2025-25827 - A Server-Side Request Forgery (SSRF) in the...
A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL.