VULNERABILITY INTELLIGENCE

CVE-2026-21431

CVSS score5.4 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2026-01-02

Last modified2026-06-17

Description

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available.