3 matches found
CVE-2012-1001
Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...
CVE-2012-1001: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...
PT-2019-6731
Name of the Vulnerable Software and Affected Versions Chyrp versions prior to 2.1.2 Chyrp versions prior to 2.5 Beta 2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the content parameter to "includes/ajax.php" or the body parameter ...