Unrated severityNVD Advisory· Published Mar 28, 2025· Updated Mar 28, 2025
Emlog Pro contains an SQL injection vulnerability.
CVE-2025-30372
Description
Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. search_controller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potential leakage of sensitive information from the user database. Version pro-2.5.9 fixes the issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/emlog/emlog/security/advisories/GHSA-w6xc-r6x5-m77cmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.