CVE-2026-73850

Summary

Emlog is an open source website building system. In 2.6.20 and earlier, there is a SQL injection vulnerability in the queryDatabase function in ai.php.

Affected Software

Weaknesses

• CWE-89: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References

• https://github.com/emlog/emlog/security/advisories/GHSA-jffg-rpvp-2qx7

• ←Previous
• Next→