<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: emlog</title><description>Every new CVE for emlog.</description><link>https://agentprime.io/</link><item><title>CVE-2026-73848: Emlog: Stored XSS via Tag Name in Article Editor</title><link>https://agentprime.io/advisories/CVE-2026-73848/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73848/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 17:47:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53757: Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE</title><link>https://agentprime.io/advisories/CVE-2026-53757/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53757/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 17:47:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53758: Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized</title><link>https://agentprime.io/advisories/CVE-2026-53758/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53758/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 17:47:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-53756: Emlog Blind SQL Injection via Authentication Cookie</title><link>https://agentprime.io/advisories/CVE-2026-53756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53756/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 04 Sep 2026 17:46:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73850: Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function</title><link>https://agentprime.io/advisories/CVE-2026-73850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73850/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 17:46:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73849: emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.</title><link>https://agentprime.io/advisories/CVE-2026-73849/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73849/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 17:37:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-73847: Emlog: Missing CSRF protection in AI Assistant execute_tool leads to full database compromise and admin account takeover</title><link>https://agentprime.io/advisories/CVE-2026-73847/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73847/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 17:33:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-67598: Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php</title><link>https://agentprime.io/advisories/CVE-2026-67598/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67598/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 03 Aug 2026 19:02:06 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-46687: Emlog Local File Inclusion (LFI)</title><link>https://agentprime.io/advisories/CVE-2026-46687/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46687/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 17:01:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-46686: Emlog Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2026-46686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46686/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 16:59:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42287: Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions</title><link>https://agentprime.io/advisories/CVE-2026-42287/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42287/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 21:51:52 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-42286: Emlog: Cross-Site Request Forgery in Admin Functions</title><link>https://agentprime.io/advisories/CVE-2026-42286/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42286/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 21:51:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41517: Emlog: Remote Code Execution via Malicious Plugin Upload</title><link>https://agentprime.io/advisories/CVE-2026-41517/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41517/</guid><description>CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 May 2026 21:50:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34788: Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters</title><link>https://agentprime.io/advisories/CVE-2026-34788/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34788/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 22:37:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34787: Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter</title><link>https://agentprime.io/advisories/CVE-2026-34787/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34787/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 22:36:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34607: Emlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCE</title><link>https://agentprime.io/advisories/CVE-2026-34607/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34607/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 22:35:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34229: Emlog: Stored XSS in Comment Module via URI Scheme Validation Bypass</title><link>https://agentprime.io/advisories/CVE-2026-34229/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34229/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 22:31:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34228: Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write</title><link>https://agentprime.io/advisories/CVE-2026-34228/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34228/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Apr 2026 22:28:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31954: Emlog asynchronous media file deletion missing CSRF protection</title><link>https://agentprime.io/advisories/CVE-2026-31954/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31954/</guid><description>CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Mar 2026 19:21:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-22799: emlog Arbitrary File Upload Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-22799/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22799/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Jan 2026 22:05:01 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-21433: Emlog vulnerable to Server-Side Request Forgery (SSRF)</title><link>https://agentprime.io/advisories/CVE-2026-21433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21433/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 19:00:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21432: Emlog has stored Cross-site Scripting issue that can lead to admin or another account ATO</title><link>https://agentprime.io/advisories/CVE-2026-21432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21432/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 18:58:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21431: Emlog vulnerable to stored Cross-site Scripting via image name</title><link>https://agentprime.io/advisories/CVE-2026-21431/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21431/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 18:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21430: Emlog: CSRF chained with stored XSS leads to ATO</title><link>https://agentprime.io/advisories/CVE-2026-21430/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21430/</guid><description>CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 18:44:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-21429: Emlog has Broken Access Control (BAC)</title><link>https://agentprime.io/advisories/CVE-2026-21429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-21429/</guid><description>CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Jan 2026 17:23:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-62717: Emlog Pro session verification code error due to clearing logic error</title><link>https://agentprime.io/advisories/CVE-2025-62717/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-62717/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 24 Oct 2025 20:13:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61930: Emlog Pro has CSRF issue that Enables Admin Password Reset</title><link>https://agentprime.io/advisories/CVE-2025-61930/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61930/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Oct 2025 20:01:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61769: Emlog vulnerable to stored XSS in file upload functionality in emlog</title><link>https://agentprime.io/advisories/CVE-2025-61769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61769/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Oct 2025 16:09:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61599: Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in &quot;Twitter&quot; Feature via Markdown Input</title><link>https://agentprime.io/advisories/CVE-2025-61599/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61599/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Oct 2025 06:27:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61597: Emlog Pro is vulnerable to stored XSS attack through HTML template injection</title><link>https://agentprime.io/advisories/CVE-2025-61597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61597/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 03 Oct 2025 06:16:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53926: Emlog has Stored Cross-site Scripting vulnerability due to error</title><link>https://agentprime.io/advisories/CVE-2025-53926/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53926/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 15:37:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53925: Emlog has Stored Cross-site Scripting vulnerability in file upload functionality</title><link>https://agentprime.io/advisories/CVE-2025-53925/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53925/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 14:21:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53924: Emlog vulnerable to stored Cross-site Scripting in links functionality</title><link>https://agentprime.io/advisories/CVE-2025-53924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53924/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 13:55:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53923: Emlog vulnerable to reflected Cross-site Scripting in admin panel</title><link>https://agentprime.io/advisories/CVE-2025-53923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53923/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 13:53:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-5886: Emlog article.php cross site scripting</title><link>https://agentprime.io/advisories/CVE-2025-5886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-5886/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Jun 2025 16:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47786: Emlog vulnerable to Stored Cross-site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-47786/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47786/</guid><description>CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 May 2025 19:33:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47785: EMLOG SQL Injection Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47785/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47785/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 May 2025 19:29:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47787: Emlog Pro Contains a File Upload Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-47787/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47787/</guid><description>CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 May 2025 19:27:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-47784: Emlog vulnerable to Deserialization of Untrusted Data</title><link>https://agentprime.io/advisories/CVE-2025-47784/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-47784/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 May 2025 19:21:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-30372: Emlog Pro contains an SQL injection vulnerability.</title><link>https://agentprime.io/advisories/CVE-2025-30372/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30372/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Mar 2025 14:51:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3968: emlog article_save.php cross site scripting</title><link>https://agentprime.io/advisories/CVE-2022-3968/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3968/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 13 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>