CVE-2026-48906

Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla

CVSS 9.3 CRITICALEPSS 0.3%CWE-284

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y

Produtos afetados

tassos.gr · Advanced Custom Fields tassos.gr · Convert Forms tassos.gr · EngageBox tassos.gr · Google Structured Data tassos.gr · MailChimp Auto-Subscribe tassos.gr · Novarain/Tassos Framework (plg_system_nrframework)tassos.gr · Smile Pack tassos.gr · Tassos Code Snippets

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://tassos.gr