Vendors / Chevereto Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Chevereto records in CISA KEV No Chevereto vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 29
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00894 · Published 2021-06-30 · No fix listed CWE-79
Priority LOW 29
Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a ..
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0325 · Published 2012-05-21 · No fix listed CWE-22
Priority LOW 28
Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00726 · Published 2017-07-13 · No fix listed CWE-79
Priority LOW 25
Chevereto Free before 1.0.13 has XSS.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00654 · Published 2018-06-15 · No fix listed CWE-79
Priority LOW 23
Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01605 · Published 2012-05-21 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 7 0 0
THREATIST.IORead the docs