Back Gbhackers

Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks

Gbhackers •Divya • February 16, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Joomla Novarain/Tassos Framework Vulnerabilities Enable SQL Injection and RCE A source code review of the Novarain/Tassos framework has revealed three critical vulnerabilities: unauthenticated file read, unauthenticated file deletion, and SQL injection. These vulnerabilities affect five widely deployed Joomla! extensions and can be exploited to achieve remote code execution (RCE) and administrator account takeover on unpatched Joomla! instances. 3 sources 39

Extracted Entities

Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (2)