CVE-2023-41621

MEDIUMNuclei

Emlog Pro v2.1.14 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2023-41621 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 21, 2023 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryMEDIUMEmlog Pro v2.1.14 - Cross-Site ScriptingCVSS 6.1

Cross Site Scripting (XSS) vulnerability in Emlog Pro v2.1.14 via /admin/store.php.

Impact

Successful exploitation could lead to unauthorized access or data theft.

Remediation

Update Emlog Pro to the latest version to mitigate the XSS vulnerability (CVE-2023-41621).

WeaknessesCWE-79
Authorsritikchaddha
Template tagscvecve2023emlogxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:emlog:emlog:2.1.14:*:*:*:pro:*:*:*
FOFA: title="emlog"
https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41621 https://nvd.nist.gov/vuln/detail/CVE-2023-41621

Source: ProjectDiscovery

References

2