Tassos.gr vulnerabilities
We track 3 vulnerabilities in Tassos.gr products across 9 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Tassos.gr vulnerabilities
- 7.5 High severity
Advanced Custom Fields extension for Joomla: Improper Neutralization of Input During Web Page Generation
Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6 - A user who could edit a Map marker label, like an article author, could add a script that ran for anyone who open
- 8.2 High severity
Convert Forms extension for Joomla: Exposure of Sensitive Information to an Unauthorized Actor
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
- 9.5 Critical severity
Novarain/Tassos Framework (plg_system_nrframewo…: Improper Access Control
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.