https://pwnwiki.com/index.php?action=history&feed=atom&title=Chevereto_3.17.1_XSS%E6%BC%8F%E6%B4%9E 2026-04-13T10:53:35Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Chevereto_3.17.1_XSS%E6%BC%8F%E6%B4%9E&diff=2791&oldid=prev 2021-05-12T08:49:52Z

<p>Created page with &quot;==XSS== &lt;pre&gt; # Exploit Title: Chevereto 3.17.1 - Cross Site Scripting (Stored) # Google Dork: &quot;powered by chevereto&quot; # Date: 19.04.2021 # Exploit Author: Akıner Kısa # Vend...&quot;</p> <p><b>New page</b></p><div>==XSS==<br /> &lt;pre&gt;<br /> # Exploit Title: Chevereto 3.17.1 - Cross Site Scripting (Stored)<br /> # Google Dork: &quot;powered by chevereto&quot;<br /> # Date: 19.04.2021<br /> # Exploit Author: Akıner Kısa<br /> # Vendor Homepage: https://chevereto.com/<br /> # Software Link: https://chevereto.com/releases<br /> # Version: 3.17.1<br /> # Tested on: Windows 10 / Xampp<br /> <br /> Proof of Concept:<br /> <br /> 1. Press the Upload image button and upload any image.<br /> 2. After uploading the image, press the pencil icon on the top right of the image and write &quot;&gt;&lt;svg/onload=alert(1)&gt; instead of the title.<br /> 3. Upload the picture and go to the picture address.<br /> <br /> &lt;/pre&gt;</div>

Pwnwiki