Chevereto

chevereto

Vendor: Chevereto • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31721 1Chevereto 1Chevereto Jul 9, 2026 Jun 30, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
CVE-2018-12030 1Chevereto 1Chevereto Nov 21, 2024 Jun 15, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Chevereto Free before 1.0.13 has XSS.
CVE-2017-1000058 1Chevereto 1Chevereto May 13, 2026 Jul 17, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.
CVE-2012-2919 1Chevereto 1Chevereto Apr 29, 2026 May 21, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter.
CVE-2012-2918 1Chevereto 1Chevereto Apr 29, 2026 May 21, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.