CVE-2024-13135
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 5, 2025
Updated: Feb 25, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2024-13135 is a newly discovered vulnerability that affects Emlog Pro 2.4.3. This issue lies within the unknown functionality of the /admin/twitter.php file in the Subpage Handler component. The manipulation of this vulnerability results in a cross-site scripting (XSS) attack, which can be launched remotely. The exploit for this vulnerability has been made public, increasing the risk of potential attacks. Users of Emlog Pro 2.4.3 are strongly advised to apply the necessary patches or updates to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Emlog
- EMLOG Pro
Affected Vendors
- EM Log