CNNVD-202510-536 Information
Oct 03, 2025
cve
CNNVD ID
CNNVD-202510-536
Related CVE
- CNNVD Published: 2025-10-03
Description (Chinese)
emlog是emlog开源的一套基于PHP和MySQL的CMS建站系统。 emlog 2.5.21及之前版本存在跨站脚本漏洞，该漏洞源于邮件模板设置存在HTML模板注入，可能导致存储型跨站脚本攻击。
Description (English)
Emlog is a CMS station system based on PHP and MySQL. Emlog 2.5.21 and previous versions have a cross-site script loophole, which results from the use of HTML templates in the mail template setting, which may result in a storage-type cross-site script attack.
Hazard Level
Medium
Vulnerability Type
跨站脚本
Affected Vendor
Emlog
Published
2025-10-03
Last Modified
2026-02-24
References
https://github.com/emlog/emlog/pull/179 https://github.com/emlog/emlog/security/advisories/GHSA-hj97-hp2c-6m4m
Patch
https://github.com/emlog/emlog/releases
Share on: