Medium severity6.5NVD Advisory· Published Jun 10, 2024· Updated Jun 17, 2026

CVE-2024-31612

Description

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information.

Affected products

Emlog/Emlogllm-fuzzy2 versions
2.3+ 1 more
- (no CPE)range: 2.3
- cpe:2.3:a:emlog:emlog:2.3.0:*:*:*:pro:*:*:*
Emlog pro/Emlog prodescription

Patches

Vulnerability mechanics

References

github.com/ss122-0ss/cms/blob/main/emlog-csrf.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000