CVE-2025-60448
A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed.
Vendor
Product
CWE
Yayın Tarihi
2025-10-03 14:15:46
Güncelleme
2025-10-08 15:21:30
Source Identifier
cve@mitre.org
KEV Date Added
-