CVE-2026-21432: Emlog

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.

Affected products

• Emlog Emlog: version 2.5.23 only

Published 2026-01-02. Last modified 2026-06-17.