CVE-2020-27459: Chronoengine Chronoforums

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted XSS code is executed.

Affected products

• Chronoengine Chronoforums: version 2.0.11 only

Published 2020-11-16. Last modified 2026-06-17.