Vulnerabilidades de Chyrp
CVEs publicadas que afetam produtos de Chyrp: 2 registro(s), com severidade, exploração e correções.
CVE-2025-69768
Alta · 7.5
CWE-89 16/03/2026
SQL Injection em Chyrp
SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component
CVE-2024-58285
Média · 5.4
CWE-79 10/12/2025
Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performing client-side attacks.