2021-06-30 10:55:15
mitre
PUBLISHED
Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.