CVE-2011-2743

Description

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to (1) the default URI or (2) includes/javascript.php, or the (3) title or (4) body parameter to admin/help.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/68563

http://www.securityfocus.com/archive/1/518890/100/0/threaded

http://www.ocert.org/advisories/ocert-2011-001.html

http://securityreason.com/securityalert/8312

http://secunia.com/advisories/45184

http://osvdb.org/73889

http://osvdb.org/73888

http://osvdb.org/73887

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS