CVE-2026-77026 — Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5

CVE-2026-77026

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 PUBLISHED

Description (CNA)

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.

Affected (CNA)

Vendor / product	Versions
tassos.gr / Convert Forms extension for Joomla	affected 1.0.0-5.2.5

CWE

CWE-602

References

https://www.tassos.gr/joomla-extensions/convert-forms

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.