CVE-2017-1000058
MEDIUMChevereto CMS <3.8.11 - XSS
Title source: llmDescription
Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.
Scores
CVSS v3
6.1
EPSS
0.0027
EPSS Percentile
49.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (2)
chevereto/chevereto
< 3.8.10
n/a/n/a
Published
Jul 17, 2017
Tracked Since
Feb 18, 2026