Search results

emlog pro 2.6.18 — Pre-authentication Reflected XSS on the admin login page via the 's' (admin_path_code) parameter

Status: Open.

#334 In emlog/emlog;

· h0rk1p opened on Jun 20, 2026

emlog pro 2.6.18 — Pre-authentication full site takeover → RCE + DB credential disclosure via the unauthenticated install.php?action=reinstall (installer not removed)

Status: Open.

#333 In emlog/emlog;

· h0rk1p opened on Jun 20, 2026

emlog pro 2.6.18 — Authenticated (low-priv writer) Stored XSS via the dashboard shortcut bar, rendered unescaped in the admin header on every admin page → admin session compromise

Status: Open.

#332 In emlog/emlog;

· h0rk1p opened on Jun 20, 2026

emlog pro 2.6.18 — Authenticated (low-priv writer) Stored XSS via article title rendered unescaped in the admin comment-moderation page → admin session compromise

Status: Open.

#331 In emlog/emlog;

· h0rk1p opened on Jun 20, 2026