CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2024-40514

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2024-40514

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

CVE-2024-40514

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2024-40514: Incorrect Default Permissions

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

CVE-2024-40513: Unrestricted Upload of File with Dangerous Type

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

Themesbrand Chatvia security vulnerabilities

Themesbrand ChatVia is a responsive chat application from Themesbrand. A security vulnerability exists in Themesbrand Chatvia version 5.3.2, which stems from the presence of an insecure privilege vulnerability that allows an attacker to elevate privileges via the user's profile name and image...

Themesbrand ChatVia security vulnerabilities

Themesbrand ChatVia is a responsive chat application from Themesbrand. A security vulnerability exists in Themesbrand ChatVia version 5.3.2, which originates from a vulnerability that allows remote attackers to execute arbitrary code via the user profile image upload function...

PT-2025-2583 · Themesebrand · Themesebrand Chatvia

Name of the Vulnerable Software and Affected Versions: themesebrand Chatvia version 5.3.2 Description: An issue in themesebrand Chatvia allows a remote attacker to execute arbitrary code via the User profile Upload image function. Recommendations: For themesebrand Chatvia version 5.3.2, consider...

CVE-2024-40514

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

CVE-2024-40513

The themesebrand Chatvia chat application (version 5.3.2 ) contains a vulnerability that allows a remote attacker to execute arbitrary code . This issue originates from the User profile Upload image function, specifically involving the unrestricted upload of files with dangerous types (CWE-434). ...

CVE-2024-40514

Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload functions...

PT-2025-2584

Name of the Vulnerable Software and Affected Versions themesebrand Chatvia version 5.3.2 Description The issue allows a remote attacker to escalate privileges via the user profile name and image upload functions. This enables unauthorized access and potential malicious activities. Recommendations...

CVE-2024-40514

The themesebrand Chatvia chat application, version 5.3.2 , is impacted by an insecure permissions vulnerability (CWE-276). A remote attacker can escalate privileges by exploiting the User profile name and image upload functions . This flaw could enable unauthorized access and facilitate malicious...