Yunda

**Name of the Vulnerable Software and Affected Versions** Emlog Pro version 2.1.14 **Description** A cross-site scripting (XSS) issue was discovered in Emlog Pro via the component "/admin/article.php?action=write". This allows for potential XSS attacks. **Recommendations** For Emlog Pro version 2.1.14, consider disabling access to the "/admin/article.php?action=write" component until a patch is available. Restricting the use of this component can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Emlog Pro version 2.1.14 **Description** A reflective cross-site scripting (XSS) issue was discovered in Emlog Pro. The vulnerability is exploited via the `/admin/article.php?active savedraft` component. This allows for potential XSS attacks. **Recommendations** For Emlog Pro version 2.1.14, consider disabling access to the `/admin/article.php?active savedraft` component until a patch is available. Restricting user input in this component can also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Emlog Pro version 2.1.14 **Description** A Cross Site Scripting (XSS) issue was found in the /admin/store.php component. **Recommendations** For Emlog Pro version 2.1.14, consider disabling access to the /admin/store.php component until a patch is available.