Cross-Site Scripting Vulnerability in Emlog Pro Affects Multiple Versions

CVE-2024-12845

What is CVE-2024-12845?

CVE-2024-12845 is a high-risk vulnerability found in Emlog Pro up to version 2.4.1. This security flaw resides in the /include/lib/common.php library and allows attackers to exploit a manipulation of the 'msg' argument, leading to a cross-site scripting (XSS) attack. Since the exploit can be executed remotely, compromised systems may lead to unauthorized access to sensitive information or drive users to malicious sites. The vulnerability has been made public, increasing the urgency for users to apply patches and focus on preventive measures.

References