Chyrp

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-69768 Mar 16, 18:16 HIGH This Week

SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component

PHP SQLi Chyrp

NVD GitHub VulDB

CVSS 3.1

7.5

EPSS

0.0%

CVE-2014-7264 Dec 11, 23:59 LOW PATCH Monitor

Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

XSS Chyrp

NVD GitHub

CVSS 2.0

3.5

EPSS

0.2%

CVE-2025-69768

EPSS 0% CVSS 7.5

HIGH This Week

SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php component

PHP SQLi Chyrp

NVD GitHub VulDB

CVE-2014-7264

EPSS 0% CVSS 3.5

LOW PATCH Monitor

XSS Chyrp

NVD GitHub