A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php.
| Software | From | Fixed in |
|---|---|---|
| emlog / emlog | 2.5.4 | 2.5.4.x |