What is GHSA-jxpj-gqq9-qj73?

GHSA-jxpj-gqq9-qj73 is a security advisory published by GitHub Security Advisories with Medium severity. Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload...

Which CVE IDs does GHSA-jxpj-gqq9-qj73 cover?

GHSA-jxpj-gqq9-qj73 covers the following CVE IDs: CVE-2021-31721. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jxpj-gqq9-qj73?

GHSA-jxpj-gqq9-qj73 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-jxpj-gqq9-qj73MediumCVSS 6.1

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2021-31721 →

📋 Description

Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-31721
https://www.exploit-db.com/exploits/49859
http://chevereto.com
http://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html
https://github.com/advisories/GHSA-jxpj-gqq9-qj73