CVE-2025-22212: Extension - tassos.gr - SQL injection in Convert Forms component version 1.0.0-1.0.0 - 4.4.9 for Joomla
Published Mar 5, 2025
·Updated
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.
Affected Software
2 affected components
Joomla Convert Forms>=1.0.0<=4.4.9
Convert Forms Project Convert Forms Joomla\!>=1.0.0<4.4.9
Event History
Mar 5, 2025
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-22212?
CVE-2025-22212 is considered a high severity SQL injection vulnerability that affects the ConvertForms component for Joomla.
2
How do I fix CVE-2025-22212?
To fix CVE-2025-22212, update the ConvertForms component to the latest version beyond 4.4.9.
3
Who is affected by CVE-2025-22212?
Authenticated attackers with administrator privileges in Joomla are primarily affected by CVE-2025-22212.
4
What kind of attacks can be executed through CVE-2025-22212?
CVE-2025-22212 allows attackers to execute arbitrary SQL commands in the submission management area of the Joomla backend.
5
What versions of ConvertForms are vulnerable to CVE-2025-22212?
ConvertForms versions 1.0.0 through 4.4.9 are vulnerable to CVE-2025-22212.