Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
12 vulnerabilities found for convert_forms by convert_forms_project
FKIE_CVE-2025-22212
Vulnerability from fkie_nvd - Published: 2025-03-05 16:15 - Updated: 2025-11-13 17:56
Severity ?
Summary
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
References
| URL | Tags | ||
|---|---|---|---|
| security@joomla.org | https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22212 | Third Party Advisory | |
| security@joomla.org | https://www.tassos.gr/ | Product |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| convert_forms_project | convert_forms | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\\!:*:*",
"matchCriteriaId": "B92AAED4-B675-418E-984F-A8B7CB0CA7DE",
"versionEndExcluding": "4.4.9",
"versionStartIncluding": "1.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend."
},
{
"lang": "es",
"value": "Una vulnerabilidad de inyecci\u00f3n SQL en el componente ConvertForms versiones 1.0.0-1.0.0 - 4.4.9 para Joomla permite a atacantes autenticados (administrador) ejecutar comandos SQL arbitrarios en el \u00e1rea de administraci\u00f3n de env\u00edos en el backend."
}
],
"id": "CVE-2025-22212",
"lastModified": "2025-11-13T17:56:55.453",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 1.4,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2025-03-05T16:15:37.643",
"references": [
{
"source": "security@joomla.org",
"tags": [
"Third Party Advisory"
],
"url": "https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22212"
},
{
"source": "security@joomla.org",
"tags": [
"Product"
],
"url": "https://www.tassos.gr/"
}
],
"sourceIdentifier": "security@joomla.org",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "security@joomla.org",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2024-40744
Vulnerability from fkie_nvd - Published: 2024-12-04 15:15 - Updated: 2025-06-04 20:57
Severity ?
Summary
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| convert_forms_project | convert_forms | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\\!:*:*",
"matchCriteriaId": "8B5AA6F4-1B5D-47A8-969B-2933792C3A63",
"versionEndExcluding": "4.4.8",
"versionStartIncluding": "1.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8."
},
{
"lang": "es",
"value": "Carga de archivos sin restricciones a trav\u00e9s de una omisi\u00f3n de seguridad en el componente Convert Forms para Joomla en versiones anteriores a 4.4.8."
}
],
"id": "CVE-2024-40744",
"lastModified": "2025-06-04T20:57:31.663",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-12-04T15:15:11.057",
"references": [
{
"source": "security@joomla.org",
"tags": [
"Product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"sourceIdentifier": "security@joomla.org",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-434"
}
],
"source": "security@joomla.org",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-434"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2024-40745
Vulnerability from fkie_nvd - Published: 2024-12-04 15:15 - Updated: 2025-06-04 20:57
Severity ?
Summary
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| convert_forms_project | convert_forms | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\\!:*:*",
"matchCriteriaId": "8B5AA6F4-1B5D-47A8-969B-2933792C3A63",
"versionEndExcluding": "4.4.8",
"versionStartIncluding": "1.0.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
},
{
"lang": "es",
"value": "Vulnerabilidad de Cross site scripting Reflejado en el componente Convert Forms para Joomla en versiones anteriores a 4.4.8."
}
],
"id": "CVE-2024-40745",
"lastModified": "2025-06-04T20:57:19.143",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2024-12-04T15:15:11.170",
"references": [
{
"source": "security@joomla.org",
"tags": [
"Product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"sourceIdentifier": "security@joomla.org",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "security@joomla.org",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
FKIE_CVE-2018-10063
Vulnerability from fkie_nvd - Published: 2018-04-12 19:29 - Updated: 2024-11-21 03:40
Severity ?
Summary
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
References
| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ | Third Party Advisory | |
| cve@mitre.org | https://www.exploit-db.com/exploits/44447/ | Exploit, Third Party Advisory, VDB Entry | |
| cve@mitre.org | https://www.tassos.gr/blog/convert-forms-2-0-4-security-release | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.exploit-db.com/exploits/44447/ | Exploit, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.tassos.gr/blog/convert-forms-2-0-4-security-release | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| convert_forms_project | convert_forms | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\\!:*:*",
"matchCriteriaId": "68CF36C4-FEEE-40A1-9706-52112D6E4362",
"versionEndExcluding": "2.0.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file."
},
{
"lang": "es",
"value": "La extensi\u00f3n Convert Forms, en versiones anteriores a la 2.0.4 para Joomla!, es vulnerable a la ejecuci\u00f3n remota de comandos empleando una inyecci\u00f3n CSV que se gestiona de manera incorrecta al exportar un archivo Leads."
}
],
"id": "CVE-2018-10063",
"lastModified": "2024-11-21T03:40:44.993",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2018-04-12T19:29:00.220",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CVE-2025-22212 (GCVE-0-2025-22212)
Vulnerability from cvelistv5 – Published: 2025-03-05 15:15 – Updated: 2025-03-14 22:58
VLAI?
Title
Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla
Summary
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
Severity ?
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.9
|
Credits
Adam Wallwork
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-22212",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-05T15:57:16.403725Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-05T15:57:19.711Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_convertforms",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.9"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Adam Wallwork"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend."
}
],
"value": "A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-14T22:58:30.568Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22212"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2025-22212",
"datePublished": "2025-03-05T15:15:51.874Z",
"dateReserved": "2025-01-01T04:33:02.765Z",
"dateUpdated": "2025-03-14T22:58:30.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-40745 (GCVE-0-2024-40745)
Vulnerability from cvelistv5 – Published: 2024-12-04 15:02 – Updated: 2024-12-25 04:34
VLAI?
Title
Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8
Summary
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
Severity ?
5.4 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.7
|
Credits
Horizon Security’s Offensive Team
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-40745",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-04T16:49:50.442949Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-04T16:50:14.735Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_osticky",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Horizon Security\u2019s Offensive Team"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-25T04:34:24.527Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla \u003c 4.4.8",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2024-40745",
"datePublished": "2024-12-04T15:02:05.517Z",
"dateReserved": "2024-07-09T16:16:21.864Z",
"dateUpdated": "2024-12-25T04:34:24.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-40744 (GCVE-0-2024-40744)
Vulnerability from cvelistv5 – Published: 2024-12-04 15:01 – Updated: 2024-12-25 04:34
VLAI?
Title
Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Summary
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
Severity ?
9.8 (Critical)
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.7
|
Credits
Horizon Security’s Offensive Team
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:tassosgr:convert_forms:*:*:*:*:*:joomla\\!:*:*"
],
"defaultStatus": "unknown",
"product": "convert_forms",
"vendor": "tassosgr",
"versions": [
{
"lessThan": "4.4.8",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-40744",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-05T17:04:35.515167Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-05T17:27:11.859Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_osticky",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Horizon Security\u2019s Offensive Team"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"value": "Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434: Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-25T04:34:33.216Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla \u003c 4.4.8",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2024-40744",
"datePublished": "2024-12-04T15:01:50.739Z",
"dateReserved": "2024-07-09T16:16:21.863Z",
"dateUpdated": "2024-12-25T04:34:33.216Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-10063 (GCVE-0-2018-10063)
Vulnerability from cvelistv5 – Published: 2018-04-12 19:00 – Updated: 2024-08-05 07:32
VLAI?
Summary
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Date Public ?
2018-04-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T07:32:00.902Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "44447",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-04-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-04-17T21:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "44447",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10063",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "44447",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"name": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release",
"refsource": "MISC",
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"name": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/",
"refsource": "CONFIRM",
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-10063",
"datePublished": "2018-04-12T19:00:00.000Z",
"dateReserved": "2018-04-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T07:32:00.902Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-22212 (GCVE-0-2025-22212)
Vulnerability from nvd – Published: 2025-03-05 15:15 – Updated: 2025-03-14 22:58
VLAI?
Title
Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla
Summary
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
Severity ?
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.9
|
Credits
Adam Wallwork
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-22212",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-05T15:57:16.403725Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-05T15:57:19.711Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_convertforms",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.9"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Adam Wallwork"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend."
}
],
"value": "A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-14T22:58:30.568Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22212"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2025-22212",
"datePublished": "2025-03-05T15:15:51.874Z",
"dateReserved": "2025-01-01T04:33:02.765Z",
"dateUpdated": "2025-03-14T22:58:30.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-40745 (GCVE-0-2024-40745)
Vulnerability from nvd – Published: 2024-12-04 15:02 – Updated: 2024-12-25 04:34
VLAI?
Title
Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8
Summary
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
Severity ?
5.4 (Medium)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.7
|
Credits
Horizon Security’s Offensive Team
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-40745",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-04T16:49:50.442949Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-04T16:50:14.735Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_osticky",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Horizon Security\u2019s Offensive Team"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-25T04:34:24.527Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla \u003c 4.4.8",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2024-40745",
"datePublished": "2024-12-04T15:02:05.517Z",
"dateReserved": "2024-07-09T16:16:21.864Z",
"dateUpdated": "2024-12-25T04:34:24.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-40744 (GCVE-0-2024-40744)
Vulnerability from nvd – Published: 2024-12-04 15:01 – Updated: 2024-12-25 04:34
VLAI?
Title
Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Summary
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
Severity ?
9.8 (Critical)
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
| URL | Tags | |
|---|---|---|
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| tassos.gr | Convert Forms component for Joomla |
Affected:
1.0.0-4.4.7
|
Credits
Horizon Security’s Offensive Team
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:tassosgr:convert_forms:*:*:*:*:*:joomla\\!:*:*"
],
"defaultStatus": "unknown",
"product": "convert_forms",
"vendor": "tassosgr",
"versions": [
{
"lessThan": "4.4.8",
"status": "affected",
"version": "1.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-40744",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-05T17:04:35.515167Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-05T17:27:11.859Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageName": "com_osticky",
"product": "Convert Forms component for Joomla",
"vendor": "tassos.gr",
"versions": [
{
"status": "affected",
"version": "1.0.0-4.4.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Horizon Security\u2019s Offensive Team"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"value": "Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434: Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-25T04:34:33.216Z",
"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"shortName": "Joomla"
},
"references": [
{
"tags": [
"product"
],
"url": "https://www.tassos.gr/joomla-extensions/convert-forms"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla \u003c 4.4.8",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
"assignerShortName": "Joomla",
"cveId": "CVE-2024-40744",
"datePublished": "2024-12-04T15:01:50.739Z",
"dateReserved": "2024-07-09T16:16:21.863Z",
"dateUpdated": "2024-12-25T04:34:33.216Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-10063 (GCVE-0-2018-10063)
Vulnerability from nvd – Published: 2018-04-12 19:00 – Updated: 2024-08-05 07:32
VLAI?
Summary
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Date Public ?
2018-04-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T07:32:00.902Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "44447",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-04-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-04-17T21:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "44447",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10063",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "44447",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/44447/"
},
{
"name": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release",
"refsource": "MISC",
"url": "https://www.tassos.gr/blog/convert-forms-2-0-4-security-release"
},
{
"name": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/",
"refsource": "CONFIRM",
"url": "https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-10063",
"datePublished": "2018-04-12T19:00:00.000Z",
"dateReserved": "2018-04-12T00:00:00.000Z",
"dateUpdated": "2024-08-05T07:32:00.902Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}