Approved changes feed: RSS · Atom

cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\!:*:*

part: a version: * update: *

VendorConvert Forms Project (da897681-2a81-51cb-b268-bd060c8ac32b)
ProductConvert Forms (e6eeca1e-1153-5b7b-a6fe-30adf98b37a2)
Edition*
Language*
Software edition*
Target softwarejoomla!
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-22212 vulnerable 2026-06-08 07:10:52.368683 Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
Published: 2025-03-05T15:15:51.874Z
Updated: 2025-03-14T22:58:30.568Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40745 vulnerable 2026-06-08 06:43:53.124339 Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
Published: 2024-12-04T15:02:05.517Z
Updated: 2024-12-25T04:34:24.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-40744 vulnerable 2026-06-08 06:43:53.123761 Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
Published: 2024-12-04T15:01:50.739Z
Updated: 2024-12-25T04:34:33.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10063 vulnerable 2026-06-08 05:10:26.292634 Details available
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Published: 2018-04-12T19:00:00.000Z
Updated: 2024-08-05T07:32:00.902Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.