CVE-2021-31721

PoC ×2—

CVSS 3.1

6.1 medium

EPSS

<1%p58

Published

Jun 30, 2021 (Jun 30, 2021)

Modified

Jul 9, 2026

Description

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

Vendors: chevereto
Products: chevereto
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.