Critical severity9.8NVD Advisory· Published May 15, 2025· Updated Jun 17, 2026

CVE-2025-47784

Description

Emlog is an open source website building system. Versions 2.5.13 and prior have a deserialization vulnerability. A user who creates a carefully crafted nickname can cause str_replace to replace the value of name_orig with empty, causing deserialization to fail and return false. Commit 9643250802188b791419e3c2188577073256a8a2 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Emlog/Emlogv53 versions
<= 2.5.13+ 2 more
- (no CPE)range: <= 2.5.13
- cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*range: <2.5.14
- (no CPE)range: <=2.5.13

Patches

Vulnerability mechanics

References

github.com/emlog/emlog/commit/9643250802188b791419e3c2188577073256a8a2nvdPatch
github.com/emlog/emlog/security/advisories/GHSA-f56g-m99v-mqc3nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000