Lucene search
+L

47 matches found

NVD
NVD
•added 2026/07/17 4:17 p.m.•27 views

CVE-2026-58148

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS0.00436EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/17 3:48 p.m.•55 views

CVE-2026-58148

The CVE-2026-58148 entry concerns the Joomla ChronoForms extension, with an unauthenticated stored XSS vulnerability affecting ChronoForms prior to version 8.0.53. The issue is confirmed in the CVE listing, which identifies the vulnerable component as ChronoForms for Joomla and describes an unaut...

8.7CVSS5.7AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/17 3:48 p.m.•10 views

CVE-2026-58148 Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS5.2AI score0.00436EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/17 3:48 p.m.•12 views

CVE-2026-58148

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS5.2AI score0.00436EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/17 3:48 p.m.•15 views

EUVD-2026-45185

The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS5.2AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/17 3:48 p.m.•53 views

CVE-2026-58148 Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•0 views

CVE-2026-58148: Improper Neutralization of Input During Web Page Generation

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•26 views

PT-2026-60784

The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability...

8.7CVSS5.2AI score0.00436EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-15059

Malware in sbrugna...

4CVSS4.2AI score0.01083EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-49910

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:54 a.m.•15 views

CVE-2022-47135

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

8.8CVSS7.1AI score0.0026EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 6:28 p.m.•10 views

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

4CVSS6.9AI score0.01083EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/25 9:15 a.m.•16 views

CVE-2022-47135

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

8.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/25 9:15 a.m.•25 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

6.8CVSS8.7AI score0.0026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/25 8:06 a.m.•12 views

CVE-2022-47135 WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

4.3CVSS7.4AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/25 8:06 a.m.•37 views

CVE-2022-47135 WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in chronoengine.Com Chronoforms plugin = 7.0.9 versions...

4.3CVSS9AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/25 8:06 a.m.•60 views

CVE-2022-47135

CVE-2022-47135: Chronoforms WordPress plugin, versions

8.8CVSS6.5AI score0.0026EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/05/25 12:00 a.m.•17 views

WordPress plugin Chronoforms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS7.8AI score0.0026EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/03/14 12:00 a.m.•22 views

WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software Chronoforms Type Plugin Vulnerable versions = 7.0.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47135 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 99a338593a2f Credits rezaduty Required privile...

8.8CVSS6.6AI score0.0026EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2023/03/14 12:00 a.m.•23 views

Chronoforms <= 7.0.9 - CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

8.8CVSS6.7AI score0.0026EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder