Skip to content
OpenAdvisories

Product · tassos.gr

Google Structured Data

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-48906

    Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla

    The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

    tassos.gr Convert Forms Google Structured Data Smile Pack
  • Critical 9.5
    CVE-2026-21627 Public exploit

    Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

    The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.

    tassos.gr Convert Forms Google Structured Data Smile Pack