ExifCleaner Changelog

What's new in ExifCleaner 3.6.0

• Security:
• Fix for XSS and Electron reverse shell vulnerabilities by sanitizing exiftool HTML output in the UI. To take advantage of this, an attacker would have had to write image metadata containing malicious script code to a file that you then download and run through ExifCleaner.
• XSS:
• exiftool -Comment='OverJT' -PixelUnits='meters' image.png
• Electron reverse shell:
• exiftool -Comment='OverJT' -PixelUnits='meters' image.png