Vulnerabilities

TI-2021-09530 CVE-2021-28376 · GHSA-g664-8xwh-mv2c

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

LOW 16

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01119 Published 2022-01-12 No fix listed CWE-22

TI-2021-09531 CVE-2021-28377 · GHSA-8p5v-jw4g-v47q

LOW 35

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0852 Published 2022-01-12 No fix listed CWE-22

TI-2020-16669 CVE-2020-27459 · GHSA-whhf-44jp-82gr

LOW 29

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00945 Published 2020-11-16 No fix listed CWE-79