HIGH 8.7 NVD

CVE-2026-53758

Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means

Emlog is an open source website building system. In versions 2.6.29 and prior, article content is processed by Parsedown without enabling safe mode, which means raw HTML including <script> tags embedded in Markdown is passed through unescaped. The output is rendered with no additional sanitization, resulting in stored XSS visible to all site visitors. At time of publication, there are no publicly known patches.

References

https://github.com/emlog/emlog/security/advisories/GHSA-35vc-2gv4-mw77

Published: 2026-09-04 · Source: NVD · Feed updated: 2026-09-04

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-09-04 via NVD.

vulnfeed aggregates 10236 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.