Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52

CVE-2026-58148

Description

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.

Affected products

Joomla/ChronoFormsllm-create
Range: 8.0 - 8.0.52
Chronoengine/Chronoformsllm-fuzzy
Range: 8.0 - 8.0.52

Patches

Vulnerability mechanics

References

www.chronoengine.commitreproduct

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000