CVE-2025-29405: Emlog

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected products

• Emlog Emlog: from 2.5.1, up to and including 2.5.7

Published 2025-03-19. Last modified 2026-06-17.