Description
Emlog Pro是Emlog开源的一个博客系统。 Emlog Pro 2.5.19版本和更早版本存在跨站请求伪造漏洞，该漏洞源于密码更改端点存在跨站请求伪造，可能导致特权用户账户接管。
Emlog Pro 跨站请求伪造漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-61930
https://github.com/emlog/emlog/security/advisories/GHSA-m2qw-9wjx-qxm2
https://access.redhat.com/security/cve/cve-2025-61930
https://www.sentinelone.com/vulnerability-database/cve-2025-61930/
https://app.opencve.io/cve/CVE-2025-61930
https://cve.imfht.com/detail/CVE-2025-61930?lang=en
https://osv.dev/vulnerability/CVE-2026-31954
https://www.cvedetails.com/cve/CVE-2026-21430/
https://emlog.vip/thread-6-1-1.html
https://blog.csdn.net/weixin_28932617/article/details/116433134
https://avd.aliyun.com/detail?id=AVD-2020-21321