Skip to content
OpenAdvisories

Vendor

tassos.gr

9 known vulnerabilities.

Products

Convert Forms component for Joomla 3 Convert Forms extension for Joomla 2 Novarain/Tassos Framework (plg_system_nrframework) 2 Convert Forms 2 EngageBox 2 Google Structured Data 2 Advanced Custom Fields 2 Smile Pack 2 Advanced Custom Fields extension for Joomla 2 Smile Pack extension for Joomla 2 Tassos Code Snippets 1 MailChimp Auto-Subscribe 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-48906

    Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla

    The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

    tassos.gr Convert Forms Google Structured Data Smile Pack
  • Critical 9.5
    CVE-2026-21627 Public exploit

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.

    tassos.gr Convert Forms Google Structured Data Smile Pack
  • Critical 9.8
    CVE-2024-40744

    Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8

    Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.

    tassos.gr Convert Forms component for Joomla Web / CMS