Lucene search
K

8 matches found

NVD
NVD
added 2026/05/27 11:16 a.m.14 views

CVE-2026-48906

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites...

9.3CVSS0.00267EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:11 a.m.6 views

CVE-2026-48906

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites...

9.3CVSS5.9AI score0.00267EPSS
Exploits0References2Affected Software8
EUVD
EUVD
added 2026/05/27 9:11 a.m.9 views

EUVD-2026-32162

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites...

9.3CVSS5.9AI score0.00267EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 9:11 a.m.16 views

CVE-2026-48906

CVE-2026-48906 affects the Tassos Framework Plugin (Novarain/Tassos Framework) used with Joomla. The CVE records describe an arbitrary file deletion vulnerability in the plugin prior to version 6.1.0, enabling deletion of arbitrary files on affected sites. The CVSS analysis indicates remote acces...

9.3CVSS5.9AI score0.00267EPSS
Exploits0References1Affected Software8
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.7 views

PT-2026-43681

Name of the Vulnerable Software and Affected Versions Tassos Framework versions prior to 6.1.0 Description A flaw in the Tassos Framework Plugin enables users to perform arbitrary file deletion on affected sites. Arbitrary file deletion is a condition where an attacker can delete any file on the...

9.3CVSS5.9AI score0.00267EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.9 views

Tassos Framework Plugin 访问控制错误漏洞

The Tassos Framework Plugin is a Joomla extension and functionality enhancement framework developed by Tassos Marinos. The Tassos Framework Plugin has a security vulnerability related to access control, which allows users to delete any file on the affected site...

9.3CVSS5.8AI score0.00267EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 3:20 p.m.9 views

CVE-2026-21627

The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s comajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction...

9.5CVSS0.00397EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.8 views

PT-2026-21017

Name of the Vulnerable Software and Affected Versions Joomla affected versions not specified Description The issue stemmed from how the Tassos Framework plugin processed certain AJAX requests via Joomla’s com ajax entry point. In specific scenarios, internal framework functionality was accessible...

9.5CVSS5.1AI score0.00397EPSS
Exploits1References5
Rows per page
Query Builder