|=========================================================================== | # Exploit Title : Chevereto 3.17.1 - Stored Cross Site Scripting (XSS) | | # Author : Ali Seddigh | | # Category : Web Application | | # Vendor Homepage: https://chevereto.com/ | | # Software Link: https://chevereto.com/releases | | # Tested on : [ Windows ~> 10 ] | | # Version : 3.17.1 | | # Date : 2021-05-23 |=========================================================================== | | # Proof of Concept (POC): | | 1. Press the Upload image button and upload any image. | 2. After uploading the image, press the pencil icon on the top right of the image and write "><svg/onload=alert(1)> instead of the title. | 3. Upload the picture and go to the picture address. | |=========================================================================== | # Discovered By : Ali Triplex |===========================================================================