CVE-2024-13132: Emlog Pro Subpage article.php cross site scripting

Q: What is the severity of CVE-2024-13132?

CVE-2024-13132 is classified as a problematic vulnerability affecting Emlog Pro up to version 2.4.3.

Q: What type of vulnerability is CVE-2024-13132?

CVE-2024-13132 is a cross-site scripting (XSS) vulnerability found in the /admin/article.php file.

Q: How can CVE-2024-13132 be exploited?

CVE-2024-13132 can be exploited remotely by manipulating the affected subpage handler code.

Q: How do I fix CVE-2024-13132?

To remediate CVE-2024-13132, update Emlog Pro to version 2.4.4 or later.

Q: Which software is affected by CVE-2024-13132?

CVE-2024-13132 affects Emlog Pro versions up to and including 2.4.3.

Published Jan 5, 2025

Updated

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.3. This vulnerability affects unknown code of the file /admin/article.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Emlog emlog>=2.4.0<=2.4.3

Emlog Emlog Pro<=2.4.3

Event History

Jan 5, 2025

CVE Published

via MITRE·04:31 AM

Data Sourced

via MITRE·04:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-13132?

CVE-2024-13132 is classified as a problematic vulnerability affecting Emlog Pro up to version 2.4.3.

What type of vulnerability is CVE-2024-13132?

CVE-2024-13132 is a cross-site scripting (XSS) vulnerability found in the /admin/article.php file.

How can CVE-2024-13132 be exploited?

CVE-2024-13132 can be exploited remotely by manipulating the affected subpage handler code.

How do I fix CVE-2024-13132?

To remediate CVE-2024-13132, update Emlog Pro to version 2.4.4 or later.

Which software is affected by CVE-2024-13132?