VULNERABILITY INTELLIGENCE

CVE-2026-58148

EPSS probability0.44%
CISA KEVNot currently listed
Published2026-07-17
Last modified2026-10-24

Description

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.

Weakness classification

  • security@joomla.org: CWE-79

Primary references