Skip to content
OpenAdvisories

Vendor

tassos.gr

9 known vulnerabilities.

Products

Convert Forms component for Joomla 3 Convert Forms extension for Joomla 2 Novarain/Tassos Framework (plg_system_nrframework) 2 Convert Forms 2 EngageBox 2 Google Structured Data 2 Advanced Custom Fields 2 Smile Pack 2 Advanced Custom Fields extension for Joomla 2 Smile Pack extension for Joomla 2 Tassos Code Snippets 1 MailChimp Auto-Subscribe 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.5
    CVE-2026-21627 Public exploit

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.

    tassos.gr Convert Forms Google Structured Data Smile Pack