CVE-2024-12843
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 20, 2024
Updated: Jan 7, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12843 is a newly disclosed vulnerability affecting Emlog Pro versions up to 2.4.1. This issue is considered problematic and allows for remote cross-site scripting attacks. The vulnerability lies in the processing of the /admin/plugin.php file, where an argument filter can be manipulated to execute malicious scripts in users' browsers. The exploit for this vulnerability has been made public, increasing the risk of attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Emlog
Affected Vendors
- EM Log