Cross Site Scripting Vulnerability in Chevereto by Chevereto
CVE-2021-31721
6.1MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-31721?
Chevereto versions prior to 3.17.1 are susceptible to a Cross Site Scripting (XSS) attack that occurs during the image upload process. This vulnerability allows attackers to inject malicious scripts via the image title, potentially compromising the security of users and their data. Proper sanitization of user input in image titles is critical to mitigate this risk.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.