CVE Catalog
CVE-2026-21627
CriticalSummary
The vulnerability in the Tassos Framework plugin concerns handling of AJAX requests through Joomla's com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.
Risk Assessment
An attacker may exploit unauthorized function calls, potentially leading to unauthorized access or privilege escalation in the Joomla application.
Recommendation
Update the Tassos Framework plugin to the latest version and restrict access to the com_ajax endpoint for unauthorized users.
Original NVD description (English source)
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.