Chyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing attackers to hijack the authentication of logged in users to modify account information, including their password.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-1000008.json"