High · 8.7 CVE-2026-58148 EUVD-2026-45185GHSA-2r72-6w83-g3hq

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

Published Jul 17, 2026 · Updated Jul 23, 2026 · Assigned by Joomla

Vendor: chronoengine.com Product: ChronoForms extension for Joomla Category: Web / CMS

Description

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.

Affected products

Vendor	Product	Affected	Fixed
chronoengine.com	ChronoForms extension for Joomla	8.0-8.0.52	—

References

https://www.chronoengine.com/ product