Chyrp

8 CVEs across 1 Chyrp products. Browse Chyrp vulnerabilities, severities, and proof-of-concept exploits.

Chyrp products with known CVEs

ProductCVEs
Chyrp8
Chyrp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-69768High7.52026-03-16SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component
CVE-2024-58285Medium5.42025-12-10Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can cr…
CVE-2012-1001Medium6.12019-11-21Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML v…
CVE-2014-72642014-12-11Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in C…
CVE-2011-27452011-07-27upload_handler.php in the swfupload extension in Chyrp 2.0 and earlier relies on client-side JavaScript code to restrict the file extensions of uploaded files…
CVE-2011-27802011-07-19Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fil…
CVE-2011-27432011-07-19Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action param…
CVE-2011-27442011-07-19Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F (encoded dot dot sl…