CVE-2026-21431: Emlog

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media library ` function while publishing an article. As of time of publication, no known patched versions are available.

Affected products

• Emlog Emlog: version 2.5.23 only

Published 2026-01-02. Last modified 2026-06-17.