Vulnerability Description
Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the siteurl parameter. It is possible to inject malicious code into siteurl parameter resulting in Stored XSS. When someone clicks on the link the malicious code is executed. As of time of publication, no known patched versions exist.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emlog | Emlog | <= 2.5.17 |
Related Weaknesses (CWE)
References
- https://github.com/emlog/emlog/security/advisories/GHSA-6rmq-5rjf-3fmxExploitThird Party Advisory
- https://github.com/emlog/emlog/security/advisories/GHSA-6rmq-5rjf-3fmxExploitThird Party Advisory
FAQ
What is CVE-2025-53924?
CVE-2025-53924 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Emlog is an open source website building system. A cross-site scripting (XSS) vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script...
How severe is CVE-2025-53924?
CVE-2025-53924 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53924?
Check the references section above for vendor advisories and patch information. Affected products include: Emlog Emlog.