CVE-2026-77026

Description

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions.

References

• https://www.tassos.gr/joomla-extensions/convert-forms