CVE-2025-22212 - CVE House
Back to Database
Status published Unknown CVE-2025-22212

Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla

Vulnerability Description

A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22212

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Adam Wallwork

References

More from tassos.gr

View All →
CVE-2024-40745
Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8
Unknown 0
CVE-2024-40744
Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8
Unknown 0

Affected Vendor

Affected Software

Convert Forms component for Joomla
Vulnerable Versions:
1.0.0-4.4.9

Timeline

Official Publish: March 5th, 2025
Last Modified: March 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact