XSS in Chronoengine.com Chronoforms Extension For Joomla

CVE-2026-58148

Joomla Extension - chronoengine.com - Stored XSS in ChronoForms extension for Joomla 8.0 - 8.0.52 - The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (36.4th percentile) — read the EPSS interpretation.