PT-2026-60784 · Chronoengine.Com · Chronoforms Extension For Joomla

Italo Almeida · CVE-2026-58148 · Published 2026-07-17 · Updated 2026-07-17

Mitre

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

The Joomla extension ChronoForms is vulnerable to an unauthenticated stored XSS vulnerability.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-58148

Affected Products

Chronoforms Extension For Joomla

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-58148 · Security Note
• https://chronoengine.com · Note