Vendors / Convert Forms Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Convert Forms Project records in CISA KEV No Convert Forms Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00516 · Published 2024-12-04 · No fix listed CWE-434
Priority MEDIUM 47
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in b…
CVSS 3.1 LOW 2.7· Network · High privileges · No interaction · EPSS 0.00327 · Published 2025-03-05 · No fix listed CWE-89
Priority MEDIUM 46
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.09065 · Published 2018-04-12 · No fix listed
Priority LOW 24
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00224 · Published 2024-12-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 1 1 0
THREATIST.IORead the docs