Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.
No PoCs from references.
- https://github.com/mamgad/mamgad