CVE-2022-23872

2022-01-3122:15:07

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.

CPENameOperatorVersion
emlogeqpro-1.1.1
emlogeq5.3.1
emlogeqpro-1.0.1
emlogeqemlog_5.2.0
emlogeqemlog_5.2.1
emlogeq6.0.0
emlogeqpro-1.0.6
emlogeqpro-1.0.7
emlogeqpro-1.0.2
emlogeqemlog_5.3.0

Name	Operator	Version
emlog	eq	pro-1.1.1
emlog	eq	5.3.1
emlog	eq	pro-1.0.1
emlog	eq	emlog_5.2.0
emlog	eq	emlog_5.2.1
emlog	eq	6.0.0
emlog	eq	pro-1.0.6
emlog	eq	pro-1.0.7
emlog	eq	pro-1.0.2
emlog	eq	emlog_5.3.0