Vulnerabilities (CVE)

Filtered by vendor Convert Forms Project Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-22212 1 Convert Forms Project 1 Convert Forms 2025-05-28 N/A 2.7 LOW
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
CVE-2018-10063 1 Convert Forms Project 1 Convert Forms 2024-11-21 6.8 MEDIUM 7.8 HIGH
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.