CVE-2025-60936

Published October 24th, 2025

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Emoncms 11.7.3 is vulnerable to Cross Site in the input handling mechanism. This vulnerability allows authenticated attackers with API access to inject malicious JavaScript code that executes when administrators view the application logs.

emoncms/emoncms

Web-app for processing, logging and visualising energy, temperature and other environmental data

GitHub

1.32K