medium6.9
CVE-2026-77026
Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access c…
Impact
Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
Affected products
| Product | Affected versions |
|---|---|
| Convert Forms Extension | before 5.2.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.