What’s Vulnerable › Vulnerabilities

CVE-2025-62717: Emlog Pro session verification code error due to clearing logic error

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-24 · updated 2026-10-19
• Weakness: CWE-287

Description

Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df.

Affected products

• emlog: 2.5.23

References

• https://github.com/emlog/emlog/commit/1f726df0ce56a1bc6e8225dd95389974173bd0c0
• https://github.com/emlog/emlog/security/advisories/GHSA-wwj4-ppfj-hcm6

Get alerted when CVE-2025-62717 or the next vulnerability affects your stack