emlog vulnerabilities

CVEs per yearBy the year they were published

1. 202515
2. 202625

Newest CVEs

• CVE-2026-73848

  Emlog: Stored XSS via Tag Name in Article Editor

  emlog · emlog

  Medium6.9
• CVE-2026-53757

  Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE

  emlog · emlog

  Medium6.9
• CVE-2026-53758

  Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized

  emlog · emlog

  High8.7
• CVE-2026-53756

  Emlog Blind SQL Injection via Authentication Cookie

  emlog · emlog

  Medium4.9
• CVE-2026-73850

  Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function

  emlog · emlog

  High8.6
• CVE-2026-73849

  emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

  emlog · emlog

  Critical9.8
• CVE-2026-73847

  Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover

  emlog · emlog

  Medium6.8
• CVE-2026-67598

  Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php

  emlog · emlog

  Critical9.1
• CVE-2026-46687

  Emlog Local File Inclusion (LFI)

  emlog · emlog

  High7.7
• CVE-2026-46686

  Emlog Reflected Cross-Site Scripting

  emlog · emlog

  High8.5