CVE-2026-21432

Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account takeover, including takeover of admin accounts. As of time of publication, no known patched versions are available.

More information : https://github.com/emlog/emlog/security/advisories/GHSA-4rxf-mjqx-c464