https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T18:15:19.921419+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254102 EUVD-2026-254102 2026-10-26T18:15:19.960992+00:00 EUVD-2026-254102 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60448 fkie_cve-2025-60448 2026-10-26T18:15:19.961034+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed.

 https://cve.radiocsirt.org/vuln/ghsa-w3gq-wfh6-rvfw GHSA-w3gq-wfh6-rvfw 2026-10-26T18:15:19.961069+00:00

A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when the uploaded file is viewed.