CVE-2021-28377中 5.3ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
CVE-2020-27459中 6.1Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. If any user sees the post, the inserted …