Skip to content
Balbooa Forms vulnerabilities
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
CVE-2026-102424
8.9 High
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
CVE-2026-102425
Public exploit
9.5 Critical
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
CVE-2026-101126
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
CVE-2026-101112
6.9 Medium
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
CVE-2026-101127
8.6 High
-
balbooa forms, balbooa.com balbooa forms extension for joomla +1 more
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
CVE-2026-56291
In KEVPublic exploit
EPSS 14.9%
10.0 Critical
-
balbooa joomla forms builder
Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated
CVE-2021-47930
8.8 High