CVE-2021-31721

Chevereto before 3.17.1 allows Cross Site Scripting XSS via an image title at the image upload stage...

Cloudron 6.2 Cross Site Scripting Vulnerability

Exploit Title: Cloudron 6.2 - Cross Site Scripting Reflected Exploit Author: Akıner Kısa Vendor Homepage: https://cloudron.io Software Link: https://www.cloudron.io/get.html Version: 6.3 Tested on: Demo / Localhost CVE : CVE-2021-31721 Proof of Concept: 1. Go to...

Cloudron 6.2 Cross Site Scripting

Exploit Title: Cloudron 6.2 - Cross Site Scripting Reflected Google Dork: N/A Date: 10.06.2021 Exploit Author: Akıner Kısa Vendor Homepage: https://cloudron.io Software Link: https://www.cloudron.io/get.html Version: 6.3 Tested on: Demo / Localhost CVE : CVE-2021-31721 Proof of Concept: 1. Go to...

CVE-2021-31721

Chevereto before 3.17.1 is vulnerable to Cross Site Scripting (XSS) via an image title at the image upload stage. This is corroborated across multiple sources (NVD/Red Hat/CVE list and related references). The affected product is Chevereto, and the issue is restricted to versions prior to 3.17.1....