To run Whisp on port 22 you may need to give the user & script permission to run on that privileged port.
One way to do this is to run this command pointing to the script your Whisp server is ran from.
sudo setcap CAP_NET_BIND_SERVICE=+eip /path/to/whisp-server.php
This simply allows whisp-server to listen on privileged ports (those lower than 1024).
There aren't any vulnerabilities that we're aware of, but it's bad practice & heavily and mightily discouraged.
Don't forget to allow the port through your firewall.