The Convert Forms extension for Joomla by tassos.gr contains an access control weakness (CWE-284) in its front-end Submissions view. This flaw permits unauthenticated users to access and list form submissions, exposing potentially sensitive data (CWE-200). The vulnerability affects versions from 2.5.0 up to and including 5.2.2. No CVSS score or vendor advisory with remediation details is currently available. The vulnerability is publicly disclosed but no patch or fix has been confirmed.

Unauthenticated attackers can view form submissions on affected versions, potentially exposing sensitive user data collected via forms. This unauthorized data disclosure could lead to privacy violations or information leakage. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Submissions view by implementing additional access controls or disabling the front-end submissions feature if possible.