Zhujieta0

**Name of the Vulnerable Software and Affected Versions** Emlog Pro version 1.7.1 **Description** A reflected cross-site scripting (XSS) issue was found in Emlog Pro at the "/admin/store.php" API endpoint. This allows for potential malicious script injection and execution. **Recommendations** For Emlog Pro version 1.7.1, consider restricting access to the "/admin/store.php" endpoint until a patch is available. As a temporary workaround, avoid using any user-inputted data in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.