CoreCVE
Back

CRITICAL

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability

Published Dec 8, 2025

Description

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-24

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 8, 2025
Updated Dec 8, 2025
Reserved Sep 26, 2025
Link CVE-2025-61318
CISA Vulnrichment
Updated Dec 8, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-61318
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-61318