cveboard RSS feed

CVE-2026-48906

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Novarain/Tassos Framework (plg_system_nrframework)

Vendor
tassos.gr
Product
Novarain/Tassos Framework (plg_system_nrframework)
Platforms
Unknown
Default status
unaffected
Novarain/Tassos Framework (plg_system_nrframework) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-6.0.1affectedUnavailableUnavailableUnavailableNone listed

Convert Forms

Vendor
tassos.gr
Product
Convert Forms
Platforms
Unknown
Default status
unaffected
Convert Forms · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-4.4.12affectedUnavailableUnavailableUnavailableNone listed
5.0.0-5.1.5affectedUnavailableUnavailableUnavailableNone listed

EngageBox

Vendor
tassos.gr
Product
EngageBox
Platforms
Unknown
Default status
unaffected
EngageBox · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-6.3.11affectedUnavailableUnavailableUnavailableNone listed
7.0.0-7.1.1affectedUnavailableUnavailableUnavailableNone listed

Google Structured Data

Vendor
tassos.gr
Product
Google Structured Data
Platforms
Unknown
Default status
unaffected
Google Structured Data · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-5.6.11affectedUnavailableUnavailableUnavailableNone listed
6.0.0-6.1.9affectedUnavailableUnavailableUnavailableNone listed

Advanced Custom Fields

Vendor
tassos.gr
Product
Advanced Custom Fields
Platforms
Unknown
Default status
unaffected
Advanced Custom Fields · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-2.8.12affectedUnavailableUnavailableUnavailableNone listed
3.0.0-3.1.3affectedUnavailableUnavailableUnavailableNone listed

Smile Pack

Vendor
tassos.gr
Product
Smile Pack
Platforms
Unknown
Default status
unaffected
Smile Pack · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-1.2.6affectedUnavailableUnavailableUnavailableNone listed
2.0.0-2.1.0affectedUnavailableUnavailableUnavailableNone listed

Tassos Code Snippets

Vendor
tassos.gr
Product
Tassos Code Snippets
Platforms
Unknown
Default status
unaffected
Tassos Code Snippets · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0affectedUnavailableUnavailableUnavailableNone listed

MailChimp Auto-Subscribe

Vendor
tassos.gr
Product
MailChimp Auto-Subscribe
Platforms
Unknown
Default status
unaffected
MailChimp Auto-Subscribe · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.0-5.0.5affectedUnavailableUnavailableUnavailableNone listed
5.1.0-5.2.0affectedUnavailableUnavailableUnavailableNone listed