Chevereto vulnerabilities

Products

• Chevereto 7

Newest

• chevere spa chevereto Chevereto before 4.5.8 Private Album Image Disclosure via get-album-contents CVE-2026-122326 6.9 MediumNovember 5, 2026
• chevere spa chevereto, chevereto chevereto/chevereto, rodber/chevereto-free +2 more Chevereto private profile setting leaks username on /json endpoint CVE-2026-55417 6.9 MediumJuly 7, 2026
• chevereto Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload... CVE-2021-31721 6.1 MediumJune 30, 2021
• chevereto Chevereto Free before 1.0.13 has XSS. CVE-2018-12030 5.4 MediumJune 15, 2018
• chevereto Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and... CVE-2017-1000058 6.1 MediumJuly 13, 2017
• chevereto Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers... CVE-2012-2919 Public exploit 5.0 MediumMay 21, 2012
• chevereto Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote... CVE-2012-2918 Public exploit 4.3 MediumMay 21, 2012