What’s Vulnerable › Vulnerabilities

CVE-2021-31721

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-06-30 · updated 2026-07-09
• Weakness: CWE-79

Description

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

Affected products

• chevereto: before 3.17.1 — fixed in 3.17.1

How to fix

Upgrade to a fixed version: chevereto 3.17.1. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/49859
• http://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/49859

Get alerted when CVE-2021-31721 or the next vulnerability affects your stack