A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section.
| Software | From | Fixed in |
|---|---|---|
| emlog / emlog | 2.5.4 | 2.5.4.x |