CVE-2025-61930 Emlog Pro has CSRF issue that Enables Admin Password Reset
Attackers can trick logged-in administrators into changing their passwords via CSRF, leading to account takeover in Emlog Pro.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-61930?
CVE-2025-61930 is a high-severity vulnerability in Emlog Emlog, published on 10 Oct 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Emlog is an open source website building system. Emlog Pro versions 2.5.19 and earlier are vulnerable to Cross‑Site Request Forgery (CSRF) on the password change endpoint. An attacker can trick a logged‑in administrator into submitting a crafted POST request to change the admin password without consent. Impact is account takeover of privileged users. Severity: High. As of time of publication, no known patched versions exist.
Weakness: CWE-352
Which versions are affected by CVE-2025-61930?
It affects 1 product.
Products include Emlog Emlog.
How do I fix CVE-2025-61930?
No fix has been published for CVE-2025-61930 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-61930 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-61930 exists.
Other vulnerabilities in Emlog Emlog
Sources
Also known as GHSA-m2qw-9wjx-qxm2.