Vulnerabilities

A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in b…

Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.