CVE Watch24 jul 2026

CVE-2026-34229

Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting (XSS) vulnerability in emlog

CVSS

6.1

Medio

EPSS

0.2%

p14

KEV

—

Exploit Today

0-100

Publicado: 3 abr 2026 · Última mod.: 24 jul 2026 · CWE-79

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-272026-08-24

Descripción técnica

Emlog is an open source website building system. Prior to version 2.6.8, there is a stored cross-site scripting (XSS) vulnerability in emlog comment module via URI scheme validation bypass. This issue has been patched in version 2.6.8.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-782827.1 ALT

—

——0Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.23h CVE-2026-782647.1 ALT

—

——0Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.13h CVE-2026-782637.1 ALT

—

——0Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.23h CVE-2026-325567.1 ALT

—

——0Unauthenticated Cross Site Scripting (XSS) in Boost <= 2.0.4 versions.13h CVE-2026-715036.1 MED

—

——0Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticated attacker can cause an authenticated administrator to open a crafted URL to execute arbitrary JavaScript in that session and create a persistent administrator account.1d CVE-2026-308648.9 ALT

—

——0Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting (XSS) in the dashboard revert functionality. This issue has been fixed in version 3.2.3.1d