Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-21432

Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

emlog emlog

  • = 2.5.23affected

References