Skip to content
Balbooa.com vulnerabilities
Newest
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
CVE-2026-107129
8.3 High
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0
CVE-2026-107130
6.9 Medium
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0
CVE-2026-107903
8.6 High
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0
CVE-2026-105607
8.6 High
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2
CVE-2026-102788
9.3 Critical
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
CVE-2026-102789
9.3 Critical
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0
CVE-2026-102783
6.3 Medium
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0
CVE-2026-102784
8.7 High
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
CVE-2026-102424
8.9 High
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
CVE-2026-102425
Public exploit
9.5 Critical
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
CVE-2026-101126
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
CVE-2026-101112
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
CVE-2026-101127
8.6 High
-
balbooa.com balbooa forms extension for joomla
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
CVE-2026-67364
10.0 Critical
-
balbooa.com balbooa forms extension for joomla
Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2
CVE-2026-67363
Public exploit
7.7 High
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
CVE-2026-65947
7.3 High
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
CVE-2026-65888
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
CVE-2026-65887
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2
CVE-2026-65886
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
CVE-2026-65890
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
CVE-2026-66489
5.3 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
CVE-2026-66488
5.3 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
CVE-2026-65889
9.2 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
CVE-2026-66490
6.1 Medium
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
CVE-2026-65884
10.0 Critical
-
balbooa gridbox, balbooa.com gridbox extension for joomla +1 more
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
CVE-2026-65885
9.4 Critical
-
balbooa.com balbooa forms component for joomla
Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3
CVE-2026-65880
10.0 Critical
-
balbooa.com gridbox extension for joomla
Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
CVE-2026-61425
9.4 Critical
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVE-2026-56291
In KEVPublic exploit
EPSS 14.9%
10.0 Critical
-
balbooa.com balbooa forms component for joomla
Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla
CVE-2025-49485
8.6 High
-
balbooa.com balbooa gallery component for joomla
Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla
CVE-2025-49486
8.6 High