Chronoengine

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Chronoengine records in CISA KEV

No Chronoengine vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Chronoforums · all components

TI-2021-09531 CVE-2021-28377 · GHSA-8p5v-jw4g-v47q

LOW 35

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0852 Published 2022-01-12 No fix listed CWE-22

TI-2020-16669 CVE-2020-27459 · GHSA-whhf-44jp-82gr

LOW 29

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00945 Published 2020-11-16 No fix listed CWE-79

TI-2021-09530 CVE-2021-28376 · GHSA-g664-8xwh-mv2c

LOW 16

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01119 Published 2022-01-12 No fix listed CWE-22