CVE-2024-13135

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-13135

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13135.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-13135

Published

2025-01-05T08:31:04.864Z

Modified

2026-07-15T01:49:19.295268428Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Emlog Pro Subpage twitter.php cross site scripting

Details

A vulnerability has been found in Emlog Pro 2.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/twitter.php of the component Subpage Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13135.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/emlog/emlog

Affected ranges

Type

GIT

Repo

https://github.com/emlog/emlog

Events

Introduced

e38e387a6d3a441c3d99f3be4e30217dad1a8212

Last affected

e38e387a6d3a441c3d99f3be4e30217dad1a8212

Database specific

{
    "cpe": "cpe:2.3:a:emlog:emlog:2.4.3:*:*:*:pro:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.4.3"
        },
        {
            "last_affected": "2.4.3"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

2.*

2.4.3

pro-2.*

pro-2.4.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13135.json"