Emlog Pro Cross-Site Scripting Vulnerability in Twitter Subpage Handler

A reflected cross-site scripting vulnerability has been identified in Emlog Pro version 2.4.3. The issue resides in the admin/twitter.php file, within the Subpage Handler component. This vulnerability allows remote attackers to inject malicious JavaScript into the URL, which is then executed in the context of the user's browser.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected scripts are executed in the user's browser session.

Reproduction

To reproduce this vulnerability, navigate to the admin/twitter.php page and append a crafted URL that includes JavaScript payloads. The server will return the injected script, which will be executed in the browser.