CVE-2026-21627
Vulnerability Description
The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s com_ajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-284
Source
NVD
Vendor
tassos.gr
Product
Novarain/Tassos Framework (plg_system_nrframework), Convert Forms, EngageBox, Google Structured Data, Advanced Custom Fields, Smile Pack
Discussion (0)
Add Comment
No comments yet. Be the first!