« Volver al listado

CVE-2024-40745

Estado: AnalizadaMedia (5.4)—

Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Convert Forms Project — Convert Forms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-40745",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-40745",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-04T16:49:50.442949Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "security@joomla.org",
      "affectedData": [
        {
          "vendor": "tassos.gr",
          "product": "Convert Forms component for Joomla",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-4.4.7"
            }
          ],
          "packageName": "com_osticky",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-12-04T15:15:11.170",
  "references": [
    {
      "url": "https://www.tassos.gr/joomla-extensions/convert-forms",
      "tags": [
        "Product"
      ],
      "source": "security@joomla.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@joomla.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Reflected Cross site scripting vulnerability in Convert Forms component for Joomla in versions before 4.4.8."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de Cross site scripting Reflejado en el componente Convert Forms para Joomla en versiones anteriores a 4.4.8."
    }
  ],
  "lastModified": "2026-06-17T07:46:28.307",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:convert_forms_project:convert_forms:*:*:*:*:*:joomla\\!:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B5AA6F4-1B5D-47A8-969B-2933792C3A63",
              "versionEndExcluding": "4.4.8",
              "versionStartIncluding": "1.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@joomla.org"
}