Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.