CVE-2025-61318 is a critical arbitrary file deletion vulnerability affecting Emlog Pro 2.5.20. This flaw, residing in the admin/template.php and admin/plugin.php components, allows unauthenticated attackers to perform directory traversal due to insufficient path verification and dangerous code filtering on deletion parameters. With a CVSS score of 9.1, this vulnerability poses a high risk to integrity and availability, as it can lead to complete data loss or system disruption. Currently, there is no public exploit code available, and it has not been observed in active exploitation, nor has it garnered significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.5.20CPE matchmatch criteria | cpe:2.3:a:emlog:emlog:2.5.20:*:*:*:pro:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.