Back to Database
Status published
Low
CVE-2025-62717
Emlog Pro session verification code error due to clearing logic error
Vulnerability Description
Emlog is an open source website building system. In version 2.5.23, Emlog Pro is vulnerable to a session verification code error due to a clearing logic error. This means the verification code could be reused anywhere an email verification code is required. This issue has been fixed in commit 1f726df.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62717
Credits & Attribution
No credits recorded in the NVD database.
References
More from emlog
View All →CVE-2025-61930
Emlog Pro has CSRF issue that Enables Admin Password Reset
High
8.1
CVE-2025-61769
Emlog vulnerable to stored XSS in file upload functionality in emlog
Low
2.1
CVE-2025-61599
Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input
Medium
5.1
CVE-2025-61597
Emlog Pro is vulnerable to stored XSS attack through HTML template injection
High
7.6
CVE-2025-53926
Emlog has Stored Cross-site Scripting vulnerability due to error
Medium
6.1
Affected Vendor
emlog
View all reports →Affected Software
emlog
Vulnerable Versions:
= 2.5.23
Timeline
Official Publish:
October 24th, 2025
Last Modified:
October 24th, 2025
Added to House:
July 22nd, 2026