CVE-2024-40744

The Convert Forms component for Joomla (versions prior to 4.4.8 ) is vulnerable to an unrestricted file upload due to a security bypass. This flaw allows an attacker to upload malicious files without proper restrictions, potentially leading to Remote Code Execution (RCE) . A validated exploit scr...

CVE-2025-22212

A SQL injection vulnerability exists in the Convert Forms component (versions 1.0.0 through 4.4.9 ) for Joomla . The flaw allows authenticated attackers with administrator privileges to execute arbitrary SQL commands within the submission management area of the backend. Practical impact involves ...

CVE-2024-40745

A Reflected Cross-site Scripting (XSS) vulnerability exists in the Convert Forms component for Joomla in versions prior to 4.4.8 . This flaw stems from the improper neutralization of input during web page generation, which can allow an attacker to execute malicious scripts on the client-side. Suc...

CVE-2018-10063

CVE-2018-10063 affects Joomla! Convert Forms extension prior to 2.0.4. The vulnerability is a CSV injection that enables remote command execution when exporting leads/form data, due to how CSV fields are handled during export. Documented impact includes potential arbitrary command execution with ...