CVE-2018-10063 The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
HighCVSS 7.8
EPSS 9.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| convert forms project convert forms | < 2.0.4 | 2.0.4 |
References
- extensions.joomla.org third-party-advisory
- 44447 exploit third-party-advisory vdb-entry
- www.tassos.gr third-party-advisory