CVE-2024-31612

Description

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information.

PUBLISHED Reserved 2024-04-05 | Published 2024-06-10 | Updated 2024-08-19 | Assigner mitre

References

github.com/ss122-0ss/cms/blob/main/emlog-csrf.md

github.com/ss122-0ss/cms/blob/main/emlog-csrf.md

cve.org (CVE-2024-31612)

nvd.nist.gov (CVE-2024-31612)

Download JSON