CVE-2026-21431: Emlog vulnerable to stored Cross-site Scripting via image name
Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the Resource media library function while publishing an article. As of time of publication, no known patched versions are available.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21431?
CVE-2026-21431 has been classified as a high severity vulnerability due to its potential impact on stored cross-site scripting attacks.
How do I fix CVE-2026-21431?
Currently, there is no patched version available for CVE-2026-21431, so users are advised to avoid using the vulnerable version.
What specific version of Emlog is affected by CVE-2026-21431?
CVE-2026-21431 affects Emlog version 2.5.23.
What is the nature of the vulnerability in CVE-2026-21431?
CVE-2026-21431 is a stored cross-site scripting vulnerability found in the Resource media library function during article publication.
What impact can CVE-2026-21431 have on users?
CVE-2026-21431 can allow an attacker to execute arbitrary scripts in the context of the user's browser, potentially leading to data theft or session hijacking.