Forums

I am using Chronoforms for my site. Someone messaged me about a loophole in it. He was able to access a JS file using URL - domain/administrator/components/com_chronoforms/form_actions/auto_javascript_validation/assets/auto_javascript_validation.js

I just wanted to know if this really is a loophole? Does it make my site vulnerable to attacks?
Please help.

Hi linpar,

You can access just about any JavaScript file on just about any site if you know where to look (check the page source). What is the vulnerability that your friend thinks this creates?

Bob

Hi GreyHead,

Yes. That's what I thought. But just to be sure I posted it here. I'll definitely ask my friend that question.

Thanks for the reply. 🙂