CVE-2026-65758
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.
Risk Assessment
An unauthorized user can access confidential data submitted via forms, violating privacy and potentially leading to data leakage.
Recommendation
It is recommended to update Convert Forms to a version above 5.2.2 and implement access control for the submissions view.
Other vulnerabilities in Convert Forms
Original NVD description (English source)
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.