CVE-2025-25783
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Feb 26, 2025
Updated: Mar 4, 2025
CWE ID 434
Summary
CVE-2025-25783 is a critical vulnerability affecting the admin plugin file (admin\plugin.php) in Emlog Pro version 2.5.3. Attackers can exploit this arbitrary file upload vulnerability by uploading a specially crafted Zip file, allowing them to execute arbitrary code. Successful exploitation could result in serious data breaches, unauthorized access, or complete system compromise. Users are advised to update their Emlog Pro installations to the latest version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Pro-