Emlog Pro
Monthly
Cross-site scripting (XSS) in EMLOG Pro 2.6.29 allows remote attackers to inject malicious scripts into web content, which, when viewed by an authenticated administrator, can lead to the upload of a malicious webshell and potential remote code execution. The vulnerability requires user interaction (UI:R) and a victim with elevated privileges, and exploitation results in a scope change (S:C). With a CVSS score of 6.1 (moderate) and an EPSS score of 0.14% (3rd percentile), no public exploit code has been identified at time of analysis, but the issue is considered a real, lower-priority risk requiring administrator awareness.
Cross-site scripting (XSS) in EMLOG Pro 2.6.29 allows remote attackers to inject malicious scripts into web content, which, when viewed by an authenticated administrator, can lead to the upload of a malicious webshell and potential remote code execution. The vulnerability requires user interaction (UI:R) and a victim with elevated privileges, and exploitation results in a scope change (S:C). With a CVSS score of 6.1 (moderate) and an EPSS score of 0.14% (3rd percentile), no public exploit code has been identified at time of analysis, but the issue is considered a real, lower-priority risk requiring administrator awareness.