Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-48906

Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tassos.gr Novarain/Tassos Framework (plg_system_nrframework)

Default version status: unaffected

  • 1.0.0-6.0.1affected

tassos.gr Convert Forms

Default version status: unaffected

  • 1.0.0-4.4.12affected
  • 5.0.0-5.1.5affected

tassos.gr EngageBox

Default version status: unaffected

  • 1.0.0-6.3.11affected
  • 7.0.0-7.1.1affected

tassos.gr Google Structured Data

Default version status: unaffected

  • 1.0.0-5.6.11affected
  • 6.0.0-6.1.9affected

tassos.gr Advanced Custom Fields

Default version status: unaffected

  • 1.0.0-2.8.12affected
  • 3.0.0-3.1.3affected

tassos.gr Smile Pack

Default version status: unaffected

  • 1.0.0-1.2.6affected
  • 2.0.0-2.1.0affected

tassos.gr Tassos Code Snippets

Default version status: unaffected

  • 1.0.0affected

tassos.gr MailChimp Auto-Subscribe

Default version status: unaffected

  • 1.0.0-5.0.5affected
  • 5.1.0-5.2.0affected

References