Vendors / Chronoengine Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Chronoengine records in CISA KEV No Chronoengine vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.34307 · Published 2008-02-05 · No fix listed CWE-94
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in chronoengine.Com Chronoforms plugin <= 7.0.9 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.0026 · Published 2023-05-25 · No fix listed CWE-352
Priority LOW 35
ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0852 · Published 2022-01-12 · No fix listed CWE-22
Priority LOW 29
Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00945 · Published 2020-11-16 · No fix listed CWE-79
Priority LOW 16
ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.
CVSS 3.1 LOW 2.7· Network · High privileges · No interaction · EPSS 0.01119 · Published 2022-01-12 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 2 2 1 0
