← Database

CVE-2026-21432

MEDIUM CVSS: 5.4 Published: 2026-01-02 Modified: 2026-06-17

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.

Affected Platforms

Emlog Emlog

Weakness Type

CWE-79

References