Login Request a demo
Unscored severity · published Jul 19, 2011
CVE-2011-2743
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chyrp · Chyrp
through 2.1; 2.0; 2.1; 2.1; 2.1 · source: NVD
Affected product
CH
Chyrp
Chyrp
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2743
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2743
osvdb.org
http://osvdb.org/73887
osvdb.org
http://osvdb.org/73888
osvdb.org
http://osvdb.org/73889
Vendor Advisory
http://secunia.com/advisories/45184
securityreason.com
http://securityreason.com/securityalert/8312
Exploit
http://www.justanotherhacker.com/advisories/JAHx113.txt
More from Chyrp
7.5
CVE-2025-69768
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component
6.1
CVE-2012-1001
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content…
5.4
CVE-2024-58285
Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
–
CVE-2014-7264
Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1…
–
CVE-2011-2745
upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote…