CVE-2024-13132

Summary

CVE-2024-13132 is a recently disclosed vulnerability affecting Emlog Pro versions up to 2.4.3. This issue lies within the unknown code of the /admin/article.php file in the Subpage Handler component. An attacker can exploit this cross-site scripting (XSS) vulnerability remotely, leading to potential code injection and data theft. The exploit has become publicly available, increasing the risk of successful attacks. System administrators are strongly encouraged to update their Emlog Pro installations to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.