CH
Product
Chyrp
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Chyrp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-69768 | 7.5 | Mar 16 | SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component Affected: through 2.5.2 |
| CVE-2012-1001 | 6.1 | Nov 21 | Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content… Affected: before 2.1.2; 2.5.2 |
| CVE-2024-58285 | 5.4 | Dec 10 | Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title Affected: 2.5.2 |
| CVE-2014-7264 | – | Dec 11 | Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1… Affected: through 2.5 |
| CVE-2011-2745 | – | Jul 27 | upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files, which allows remote… Affected: through 2.0 |
| CVE-2011-2780 | – | Jul 19 | Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a Affected: through 2.0 |
| CVE-2011-2743 | – | Jul 19 | Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the… Affected: through 2.1; 2.0; 2.1; 2.1; 2.1 |
| CVE-2011-2744 | – | Jul 19 | Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot slash) in the action… Affected: through 2.1; 2.0; 2.1; 2.1; 2.1 |
Showing 8