CVE-2021-28376: Chronoengine Chronoforums

Low severity, CVSS 2.7. EPSS: 1.1% chance of exploitation in the next 30 days.

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.

Affected products

• Chronoengine Chronoforums: version 7.0.7 only

Published 2022-01-12. Last modified 2026-06-17.