Unrestricted file upload via security bypass in Convert Forms component for Joomla in versions before 4.4.8.
Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.
A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.