Chyrp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Chyrp products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-69768 High · 7.5 CWE-89 Mar 16, 2026

SQL Injection in Chyrp

SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component

CVE-2024-58285 Medium · 5.4 CWE-79 Dec 10, 2025

Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title

Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performing client-side attacks.