CVE-2024-40513: Themesbrand Chatvia

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function.

Affected products

• Themesbrand Chatvia: version 5.3.2 only

Published 2025-01-16. Last modified 2026-06-17.