Information disclosure in Tassos.gr Convert Forms Extension For Joomla
CVE-2026-65758
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
Vulnerability class: Information Disclosure
EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.
Affected products
- Tassos.gr Convert Forms Extension For Joomla — versions 2.5.0-5.2.2
Weakness classification (CWE)
References
- security@joomla.org (product)