Description (CNA)
Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting (XSS) vulnerability in emlog comment module via URI scheme validation bypass. This issue has been patched in version 2.6.8.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| emlog / emlog | affected < 2.6.8 |
CWE
CWE-79
References
- https://github.com/emlog/emlog/security/advisories/GHSA-74gp-xh6w-hqw6
- https://github.com/emlog/emlog/commit/a12ab1b1a273fe634abab32fd28274c18bd57f07
ADP enrichment
No English description supplied.
No references supplied.