CVE-2024-3763

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-260603. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.mdExploit
• https://vuldb.com/?ctiid.260603Permissions Required, VDB Entry
• https://vuldb.com/?id.260603Permissions Required, VDB Entry
• https://vuldb.com/?submit.311808Third Party Advisory, VDB Entry
• https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.mdExploit
• https://vuldb.com/?ctiid.260603Permissions Required, VDB Entry
• https://vuldb.com/?id.260603Permissions Required, VDB Entry
• https://vuldb.com/?submit.311808Third Party Advisory, VDB Entry

Published

Apr 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37622Xinhu RockOA v2.6.3 was discovered to contain a reflected cr…6.1
• CVE-2024-37623Xinhu RockOA v2.6.3 was discovered to contain a reflected cr…6.1
• CVE-2024-37624Xinhu RockOA v2.6.3 was discovered to contain a reflected cr…6.1
• CVE-2024-37625zhimengzhe iBarn v1.5 was discovered to contain a reflected …6.1
• CVE-2024-37626A command injection issue in TOTOLINK A6000R V1.0.1-B2020121…8.8
• CVE-2024-37629SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS…6.1
• CVE-2024-37630D-Link DIR-605L v2.13B01 was discovered to contain a hardcod…8.8
• CVE-2024-37631TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to cont…8.8
• CVE-2024-37632TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to cont…9.8
• CVE-2024-37633TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to cont…8.8
• CVE-2024-37634TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to cont…9.8
• CVE-2024-37635TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to cont…9.8