Balbooa Gridbox vulnerabilities

• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 CVE-2026-65947 7.3 HighJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 CVE-2026-65888 10.0 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 CVE-2026-65887 10.0 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 CVE-2026-65886 9.2 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 CVE-2026-65890 9.2 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 CVE-2026-66489 5.3 MediumJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 CVE-2026-66488 5.3 MediumJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 CVE-2026-65889 9.2 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 CVE-2026-66490 6.1 MediumJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 CVE-2026-65884 10.0 CriticalJuly 29, 2026
• balbooa gridbox, balbooa.com gridbox extension for joomla +1 more Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 CVE-2026-65885 9.4 CriticalJuly 29, 2026
• balbooa gridbox The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to... CVE-2018-11690 EPSS 32.9% 6.1 MediumJune 14, 2018