Vulnerability Description
Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means raw HTML including <script> tags embedded in Markdown is passed through unescaped. The output is rendered with no additional sanitization, resulting in stored XSS visible to all site visitors. At time of publication, there are no publicly known patches.
Related Weaknesses (CWE)
References
- https://github.com/emlog/emlog/security/advisories/GHSA-35vc-2gv4-mw77
- https://github.com/emlog/emlog/security/advisories/GHSA-35vc-2gv4-mw77
FAQ
What is CVE-2026-53758?
CVE-2026-53758 is a documented vulnerability. Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means raw HTML including <script> tags embedd...
How severe is CVE-2026-53758?
CVSS scoring is not yet available for CVE-2026-53758. Check NVD for updates.
Is there a patch for CVE-2026-53758?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.