Vulnerabilities > Emlog > Emlog > 1.7.1

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-43291 Deserialization of Untrusted Data vulnerability in Emlog
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.
network
low complexity
emlog CWE-502
critical
9.8
2022-11-13 CVE-2022-3968 Cross-site Scripting vulnerability in Emlog
A vulnerability has been found in emlog and classified as problematic.
network
low complexity
emlog CWE-79
6.1
2022-11-03 CVE-2022-43372 Cross-site Scripting vulnerability in Emlog 1.7.1
Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /admin/store.php.
network
low complexity
emlog CWE-79
4.8