CNNVD-202512-1778 Information
Dec 10, 2025
cve
CNNVD ID
CNNVD-202512-1778
Related CVE
- CNNVD Published: 2025-12-10
Description (Chinese)
Chyrp是一款轻量级博客引擎。 Chyrp 2.5.2版本存在跨站脚本漏洞，该漏洞源于认证用户可在文章标题中注入恶意脚本，可能导致存储型跨站脚本攻击。
Description (English)
Zyrp is a lightweight blog engine. Chyrp 2.5.2 has a cross-site script loophole, which stems from the fact that a certified user can inject a malicious script into the article title, which may result in a storage-type cross-site script attack.
Hazard Level
High
Vulnerability Type
跨站脚本
Published
2025-12-10
Last Modified
2026-02-24
References
https://github.com/chyrp/ https://github.com/chyrp/chyrp/archive/refs/tags/v2.5.2.zip https://www.exploit-db.com/exploits/52013 https://www.vulncheck.com/advisories/chyrp-stored-cross-site-scripting-vulnerability-via-post-title
Share on: