CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-60448 | Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder [header-footer-elementor] < 2.5.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.5.0 | 2.5.0 | 2025-10-03 | — |
A security flaw has been identified in Emlog Pro version 2.5.19, specifically within its media management system. The issue arises from inadequate checks on SVG files being uploaded through the /admin/media.php interface, enabling malicious files to be introduced containing executable JavaScript code that activates when the file is accessed.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.