CVE-2026-58148

The ChronoForms extension for Joomla versions 8.0 to 8.0.52 is susceptible to an unauthenticated stored cross-site scripting (XSS) vulnerability, allowing attackers to inject malicious scripts that can execute in the context of users accessing the affected site. This could lead to data theft, session hijacking, or defacement of the website. Joomla site administrators using this extension should prioritize patching or mitigating this vulnerability to protect their users and data integrity.