Nexevo Contact Form, Backdoor

Resolution: update to 1.0.2

Users should also check for the existence of a plugin called System - Section among their installed extensions. It is malware and needs to be removed and the site treated as hacked. Further information here: https://vel.joomla.org/articles/2167-nexevo-contact-form

Update notice: http://www.nexevo.in/security-release-announcement.html

.