Vulnerabilidades do Tassos.gr Advanced Custom Fields
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Tassos.gr Advanced Custom Fields: 2 registro(s), com versões afetadas e correções.
CVE-2026-48906
Alta · 8.1
CWE-284 27/05/2026
Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-21627
Crítica · 9.5
CWE-284 20/02/2026
Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.