Security Advisory

CVE-2012-1001

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-21 21:54:40
Last updated 2024-08-06 18:45:26
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes/ajax.php or (2) body parameter to includes/error.php.