Emlog · Emlog · CVE-2026-34229
**Name of the Vulnerable Software and Affected Versions**
Emlog versions prior to 2.6.8
**Description**
A stored cross-site scripting (XSS) issue exists in the comment module. This occurs due to a URI scheme validation bypass, which allows an attacker to inject malicious scripts that are stored on the server and executed in the browsers of other users.
**Recommendations**
Update to version 2.6.8.