CVE-2014-7264

Multiple cross-site scripting XSS vulnerabilities in admin/themes/default/pages/manageusers.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 user.email or 2 user.website field in a...

PT-2014-7869

Name of the Vulnerable Software and Affected Versions Chyrp versions prior to 2.5.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the admin component of Chyrp, specifically in the Users Management feature. These vulnerabilities allow remote authenticated user...

CVE-2014-7264: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/themes/default/pages/manageusers.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 user.email or 2 user.website field in a...