CVE-2025-61318
Critical · 9.1CVSS
9.1
EPSS
0.7%
Published
Dec 8, 2025
CISA due date
—
The record
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|