CVE-2025-60447
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to persistent JavaScript execution.
Vendor
Product
CWE
Yayın Tarihi
2025-10-03 14:15:46
Güncelleme
2025-10-08 15:25:42
Source Identifier
cve@mitre.org
KEV Date Added
-