Approved changes feed: RSS · Atom

cpe:2.3:a:chyrplite:chyrp_lite:2.5.2:*:*:*:*:*:*:*

part: a version: 2.5.2 update: *

VendorChyrplite (60196bfd-684e-54f0-8139-2c8c8f52aa90)
ProductChyrp Lite (a8cfb727-6c4f-54f2-8ac5-5b748d6cef94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58285 vulnerable 2026-06-08 06:56:14.357811 Chyrp 2.5.2 Stored Cross-Site Scripting Vulnerability via Post Title
Chyrp 2.5.2 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts into post titles. Attackers can craft payloads in the title field that will execute when the post is viewed by other users, potentially stealing session cookies or performing client-side attacks.
Published: 2025-12-10T21:15:16.334Z
Updated: 2026-03-05T12:03:33.851Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.