Lucene search

Chronoforums Security Vulnerabilities

cve

CVE-2020-27459

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted XSS code is executed.

6.1CVSS

6AI Score

0.001EPSS

2020-11-16 03:15 PM

cve

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

2.7CVSS

4.1AI Score

0.001EPSS

2022-01-12 06:15 PM

cve

CVE-2021-28377

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

5.3CVSS

5.2AI Score

0.001EPSS

2022-01-12 06:15 PM