Skip to content
OpenAdvisories

Product · tassos.gr

Convert Forms

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.5
    CVE-2026-21627 Public exploit

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.