Vulnerabilidades de Tassos.gr
CVEs publicadas que afetam produtos de Tassos.gr: 2 registro(s), com severidade, exploração e correções.
Novarain/Tassos Framework (plg system nrframework) 2Convert Forms 2EngageBox 2Google Structured Data 2Advanced Custom Fields 2Smile Pack 2Tassos Code Snippets 1MailChimp Auto-Subscribe 1
CVE-2026-48906
Alta · 8.1
CWE-284 27/05/2026
Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla
The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.
CVE-2026-21627
Crítica · 9.5
CWE-284 20/02/2026
Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.