Skip to content
Balbooa vulnerabilities
Newest
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
CVE-2026-102424
8.9 High
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
CVE-2026-102425
Public exploit
9.5 Critical
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
CVE-2026-101126
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
CVE-2026-101112
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
CVE-2026-101127
8.6 High
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
CVE-2026-65947
7.3 High
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
CVE-2026-65888
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
CVE-2026-65887
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2
CVE-2026-65886
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
CVE-2026-65890
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
CVE-2026-66489
5.3 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
CVE-2026-66488
5.3 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
CVE-2026-65889
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
CVE-2026-66490
6.1 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
CVE-2026-65884
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
CVE-2026-65885
9.4 Critical
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVE-2026-56291
In KEVPublic exploit
EPSS 14.9%
10.0 Critical
-
balbooa joomla forms builder
Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated
CVE-2021-47930
8.8 High
-
balbooa gridbox
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to...
CVE-2018-11690
EPSS 32.9%
6.1 Medium