CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function.

Score

CVSS 3.1 4.6 Medium

Status

Analyzed - cve@mitre.org

Published

2025-01-16

Last modified

2025-02-03

Weaknesses

CWE-434

Affected products

• Chatvia (Themesbrand)

References

• https://github.com/php-lover-boy/ChatVia