CVE-2024-12846
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Dec 21, 2024
Updated: Jan 10, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-12846 is a recently disclosed vulnerability affecting Emlog Pro versions up to 2.4.1. The issue lies within the /admin/link.php file and involves the manipulation of the siteurl/icon argument. This vulnerability enables attackers to launch cross-site scripting attacks remotely, exploiting an unknown functionality of the file. The exploit has been made public, increasing the risk for potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Emlog
Affected Vendors
- EM Log