| Package | Affected versions | Patched versions |
|---|---|---|
| emlog | ≤ 2.5.19 |
Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery (CSRF) on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without consent. Impact is account takeover of privileged users. Severity: High. As of time of publication, no known patched versions exist.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free