Chronoengine

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Chronoengine records in CISA KEV

No Chronoengine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chronoforums 3 records LOW Chronoforms 2 records MEDIUM

Records

2 records in Chronoforms · all components

TI-2008-00539 CVE-2008-0567 · GHSA-85pc-mc7f-26qw

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms…

MEDIUM 58

Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com_chronocontact) 2.3.5 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.34307 Published 2008-02-05 No fix listed CWE-94

TI-2022-23340 CVE-2022-47135 · GHSA-29f5-5fq5-r4fr

WordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in chronoengine.Com Chronoforms plugin <= 7.0.9 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0026 Published 2023-05-25 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	2
Low	1
No CVSS	0