CVE Intelligence

Tassos.gr Convert Forms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tassos.gr Convert Forms: 2 record(s), with affected versions and fixes.

CVE-2026-48906 High · 8.1 CWE-284 May 27, 2026
Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-21627 Critical · 9.5 CWE-284 Feb 20, 2026
Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.