CVE-2026-21431
Emlog vulnerable to stored Cross-site Scripting via image name
Summary
Emlog vulnerable to stored Cross-site Scripting via image name
Original description
The description as published by the source.
Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the Resource media library function while publishing an article. As of time of publication, no known patched versions are available.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov