CVE-2018-10063

The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-04-12

Last modified

2024-08-05

Affected products

• Convert Forms (Convert Forms Project)

References

• https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/convert-forms/
• https://www.exploit-db.com/exploits/44447/
• https://www.tassos.gr/blog/convert-forms-2-0-4-security-release