Tassos.gr vulnerabilities
Published CVEs affecting Tassos.gr products: 3 record(s), with severity, exploitation and fixes.
Novarain/Tassos Framework (plg system nrframework) 2Convert Forms 2EngageBox 2Google Structured Data 2Advanced Custom Fields 2Smile Pack 2Tassos Code Snippets 1MailChimp Auto-Subscribe 1Convert Forms extension for Joomla 1
CVE-2026-65758
High · 8.2
CWE-200 Jul 23, 2026
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
CVE-2026-48906
High · 8.1
CWE-284 May 27, 2026
Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-21627
Critical · 9.5
CWE-284 Feb 20, 2026
Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.