Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-65758 1 Tassos.gr 1 Convert Forms Component For Joomia 2026-07-30 N/A
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
CVE-2026-48906 2 Tassos, Tassos.gr 16 Advanced Custom Fields, Convert Forms, Engagebox and 13 more 2026-06-01 8.1 High
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-21627 1 Tassos.gr 6 Advanced Custom Fields, Convert Forms, Engagebox and 3 more 2026-04-17 N/A
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.