Assigner | mitre |
Reserved | 2024-04-05 |
Published | 2024-06-10 |
Updated | 2024-06-10 |
Description
Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator information.
References
https://github.com/ss122-0ss/cms/blob/main/emlog-csrf.md