Vulnerabilities

TI-2021-11760 CVE-2021-31721 · GHSA-jxpj-gqq9-qj73

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

LOW 29

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00894 Published 2021-06-30 No fix listed CWE-79

TI-2018-08623 CVE-2018-12030 · GHSA-8m2g-7w6w-g4h4

Chevereto Free before 1.0.13 has XSS.

LOW 25

Chevereto Free before 1.0.13 has XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00654 Published 2018-06-15 No fix listed CWE-79

TI-2017-14397 CVE-2017-1000058 · GHSA-8pcq-p3m2-3v2h

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user…

LOW 28

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2017-07-13 No fix listed CWE-79

TI-2012-02533 CVE-2012-2919 · GHSA-4x53-c6rv-jmrr

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote…

LOW 29

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0325 Published 2012-05-21 No fix listed CWE-22

TI-2012-02532 CVE-2012-2918 · GHSA-x348-x493-xr7c

Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01605 Published 2012-05-21 No fix listed CWE-79

Vulnerabilities

Filters

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

Chevereto Free before 1.0.13 has XSS.

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user…

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote…

Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows…