Chronoengine - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2023-05-25.

Products

• Chronoforums - 3 CVEs
• Chronoforms - 2 CVEs

Newest CVEs of Chronoengine

• CVE-2022-47135 - CVSS 8.8 (high), 2023-05-25: Cross-Site Request Forgery (CSRF) vulnerability in chronoengine.Com Chronoforms plugin <= 7.0.9 versions.
• CVE-2021-28377 - CVSS 5.3 (medium), 2022-01-12: ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
• CVE-2021-28376 - CVSS 2.7 (low), 2022-01-12: ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
• CVE-2020-27459 - CVSS 6.1 (medium), 2020-11-16: Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted XSS code is…
• CVE-2008-0567 - CVSS 7.5 (high), 2008-02-05: Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to…