I believe that CFv4 only uses the Joomla! library.
The answer for CFv5 is both, by default it uses the Joomla! mailer but a copy of PHPMailer is included. Max is just completing new releases which will include the updated release. Or, if you like you can get the release from GitHub and copy the relevant files to replace those in the /libraries/cegcore/vendors/phpmailer.
ChronoForms technical support
If you'd like to buy me a coffee or two, thank you very much
I still have some websites that works with Joomla 1.5 and Chronoforms V3. Joomla.org says there is no risk if phpmailer is used by plug-ins via the Joomla API. Is this the case with Chronoforms v3?
thank you in advance
Only Chronoforms v5 has the phpmailer library, so you should be ok.
But note that Joomla 1.5 is not updated since a long time and it may have its own security holes.
If your main question got answered then please select the answer using the GREEN button!