VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026

CVE-2025-30372

CVE-2025-30372

Description

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. search_controller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potential leakage of sensitive information from the user database. Version pro-2.5.9 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Emlog/Emlog3 versions
    cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*+ 2 more
    • cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*range: <2.5.9
    • (no CPE)range: pro-2.5.7, pro-2.5.8
    • (no CPE)range: >= pro-2.5.7, < pro-2.5.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.