Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

Published Jun 30, 2021 · Updated Jul 9, 2026 · Assigned by mitre