CVE-2024-40744

CVE-2024-40744: Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8

Vendor Tassos.gr

Product Convert Forms component for Joomla

Weakness CWE-434 · Unrestricted file upload

Published December 4, 2024

Last update December 25, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.

Key dates

02Disclosure timeline

December 4, 2024 CVE published

December 25, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-40744 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html AskarLabs — CWE-434 write-up Unrestricted Upload of File with Dangerous Type

Related vulnerabilities

04Related CVE

CVE-2026-61424 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 CVE-2026-57827 Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 CVE-2018-25436 WordPress Plugin Baggage Freight Shipping Australia 0.1.0 Arbitrary File Upload CVE-2026-57828 Joomla Extension - phoca.cz - Authenticated file upload in RSFiles component < 6.1.3 CVE-2026-12476 Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter