Skip to content
CVE PROGRAM SOURCE RECORD2.0 Low

CVE-2026-21431

Emlog vulnerable to stored Cross-site Scripting via image name

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

emlog emlog

  • = 2.5.23affected

References