Lucene search
K

39 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-15059

Malware in sbrugna...

4CVSS4.2AI score0.00144EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-49910

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00177EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:54 a.m.4 views

CVE-2022-47135

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

8.8CVSS7.1AI score0.00177EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 6:28 p.m.2 views

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

4CVSS6.9AI score0.00144EPSS
Exploits1References1
OSV
OSV
added 2023/05/25 9:15 a.m.2 views

CVE-2022-47135

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

8.8CVSS5.8AI score0.00177EPSS
Exploits0References1
Prion
Prion
added 2023/05/25 9:15 a.m.11 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

6.8CVSS8.7AI score0.00177EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/25 8:6 a.m.8 views

CVE-2022-47135 WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

4.3CVSS7.4AI score0.00177EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/25 8:6 a.m.13 views

CVE-2022-47135 WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

4.3CVSS9AI score0.00177EPSS
Exploits0References1
CVE
CVE
added 2023/05/25 8:6 a.m.36 views

CVE-2022-47135

CVE-2022-47135: Chronoforms WordPress plugin, versions

8.8CVSS6.5AI score0.00177EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/05/25 12:0 a.m.1 views

WordPress plugin Chronoforms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.00177EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/03/14 12:0 a.m.6 views

WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Chronoforms Type Plugin Vulnerable versions = 7.0.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47135 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 99a338593a2f Credits rezaduty Required privile...

8.8CVSS6.6AI score0.00177EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/03/14 12:0 a.m.19 views

Chronoforms <= 7.0.9 - CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.7AI score0.00177EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2022/01/16 12:0 a.m.15 views

ChronoEngine ChronoForms Path Traversal Vulnerability

ChronoEngine ChronoForms is ChronoEngine company an easy to use and flexible Joomla form builder . A path traversal vulnerability exists in ChronoEngine ChronoForms that stems from the product failing to properly filter for special elements in the path of a resource or file. An attacker could use...

5.3CVSS5.1AI score0.52565EPSS
Exploits1References1
OSV
OSV
added 2022/01/12 6:15 p.m.1 views

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

2.7CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2022/01/12 6:15 p.m.6 views

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

4CVSS0.00144EPSS
Exploits1References1
Prion
Prion
added 2022/01/12 6:15 p.m.8 views

Directory traversal

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

4CVSS4.1AI score0.00144EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/12 5:53 p.m.11 views

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

4.2AI score0.00144EPSS
Exploits1References1
CVE
CVE
added 2022/01/12 5:53 p.m.42 views

CVE-2021-28376

ChronoForms 7.0.7 is affected by a directory traversal vulnerability (fname path traversal) that allows reading arbitrary files outside restricted directories. The issue originates from insufficient filtering of special path elements in resource/file paths in ChronoForms 7.0.7. The vulnerability ...

4CVSS4.1AI score0.00144EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.1 views

ChronoEngine ChronoForms 路径遍历漏洞

ChronoEngine ChronoForms is an easy-to-use and flexible Joomla form builder from ChronoEngine. A path traversal vulnerability exists in ChronoEngine ChronoForms that stems from the product failing to properly filter for special elements in the path of a resource or file. An attacker could use thi...

4CVSS5.1AI score0.00144EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.1 views

ChronoEngine ChronoForms 路径遍历漏洞

ChronoEngine ChronoForms is ChronoEngine company an easy to use and flexible Joomla form builder . A path traversal vulnerability exists in ChronoEngine ChronoForms that stems from the product failing to properly filter for special elements in the path of a resource or file. An attacker could use...

5.3CVSS5.6AI score0.52565EPSS
Exploits1References2
Rows per page
Query Builder