Emlog Pro Cross-Site Scripting Vulnerability in Article Management Component

A reflected cross-site scripting vulnerability has been identified in Emlog Pro versions through 2.4.3. The issue resides in the admin/article.php file within the Subpage Handler component. This vulnerability allows remote attackers to inject malicious scripts that are executed in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's session.

Reproduction

To reproduce this vulnerability, send a request to the admin/article.php page with an injected script in the 'a' parameter. The script will be executed as an alert in the user's browser, demonstrating the cross-site scripting vulnerability.