Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (19 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-31954 1 Emlog 1 Emlog 2026-03-20 0 Low
Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAuth::checkToken(), enabling CSRF attacks.
CVE-2025-60447 2 Emlog, Emlog Pro Project 2 Emlog, Emlog Pro 2025-10-15 5.9 Medium
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to persistent JavaScript execution.
CVE-2025-60448 2 Emlog, Emlog Pro Project 2 Emlog, Emlog Pro 2025-10-08 6.1 Medium
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed.
CVE-2025-5886 1 Emlog 1 Emlog 2025-06-20 3.5 Low
A vulnerability was found in Emlog up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /admin/article.php. The manipulation of the argument active_post leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-42189 1 Emlog 1 Emlog 2025-05-07 7.2 High
Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability.
CVE-2020-19028 1 Emlog 1 Emlog 2025-01-08 7.5 High
*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function.
CVE-2021-3293 1 Emlog 1 Emlog 2024-11-21 5.3 Medium
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.
CVE-2021-31737 1 Emlog 1 Emlog 2024-11-21 9.8 Critical
emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php.
CVE-2021-30227 1 Emlog 1 Emlog 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0.
CVE-2021-30081 1 Emlog 1 Emlog 2024-11-21 8.8 High
An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page.
CVE-2020-21654 1 Emlog 1 Emlog 2024-11-21 7.2 High
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file.
CVE-2020-21585 1 Emlog 1 Emlog 2024-11-21 9.8 Critical
Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.
CVE-2020-21321 1 Emlog 1 Emlog 2024-11-21 4.3 Medium
emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.
CVE-2020-21014 1 Emlog 1 Emlog 2024-11-21 6.5 Medium
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.
CVE-2020-21013 1 Emlog 1 Emlog 2024-11-21 7.2 High
emlog v6.0.0 contains a SQL injection via /admin/comment.php.
CVE-2020-18194 1 Emlog 1 Emlog 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.
CVE-2019-17073 1 Emlog 1 Emlog 2024-11-21 6.5 Medium
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.
CVE-2019-16868 1 Emlog 1 Emlog 2024-11-21 9.8 Critical
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.
CVE-2018-18316 1 Emlog 1 Emlog 2024-11-21 N/A
emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.