An attacker can forge a cross‑site request to the AI Assistant execute_tool action in admin/ai.php. Because the authentication cookie lacks a SameSite attribute, a logged‑in administrator is vulnerable when visiting a malicious page. The request passes attacker‑controlled SQL and confirmation strings to a back‑end service that executes without thorough validation. Consequently, a remote unauthenticated attacker can read all database tables and write to every table except the blog, allowing the attacker to modify the user table and take over an administrator account.

The vulnerable product is emlog, a website building system. Versions 2.6.26 and older are affected. The flaw exists in the admin/ai.php script, with the sensitive logic located in include/service/ai.php.

The CVSS score of 6.8 indicates a moderate to high severity. Because the exploit requires only a forged request and a logged‑in administrator, the potential impact is significant, though a recent login is necessary. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, but the combination of CSRF and unsanitized SQL injection provides a clear attack path for attackers familiar with the app.