CVE-2026-58148

The CVE-2026-58148 entry concerns the Joomla ChronoForms extension, with an unauthenticated stored XSS vulnerability affecting ChronoForms prior to version 8.0.53. The issue is confirmed in the CVE listing, which identifies the vulnerable component as ChronoForms for Joomla and describes an unaut...

PT-2026-60784

Name of the Vulnerable Software and Affected Versions ChronoForms versions 8.0 through 8.0.52 Description The ChronoForms extension for Joomla contains a stored Cross-Site Scripting XSS flaw. This issue allows an unauthenticated attacker to inject malicious scripts that are stored on the server a...