CVE-2012-1001 Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/...
MediumCVSS 6.1
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chyrp | < 2.1.2 | 2.1.2 |
| chyrp | = 2.5.2-b1 | No fix listed |
References
- www.htbridge.ch exploit third-party-advisory
- archives.neohapsis.com broken-link
- chyrp.net broken-link
- github.com patch third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- www.securityfocus.com third-party-advisory vdb-entry