CVE-2025-22212: A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute…

PriorityP420low2.7CVSS 3.1

AVNACLPRHUINSUCNILAN

EPSS

0.30%

21.8th percentile

A SQL injection vulnerability in the Convert Forms component versions 1.0.0-1.0.0 - 4.4.9 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the submission management area in backend.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
convert_forms_project	convert_forms	>= 1.0.0 < 4.4.9	4.4.9
tassos.gr	convert_forms_component_for_joomla	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.