[ Vendor · 8 CVEs ]
balbooa.com
CVEs affecting balbooa.com published in the last 30 days, plus any balbooa.com CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102784 | 8 Oct 2026 | CVSS 8.7 | balbooa.com Gridbox extension for JoomlaJoomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla… | |
| CVE-2026-102783 | 8 Oct 2026 | CVSS 6.3 | balbooa.com Gridbox extension for JoomlaJoomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its… | |
| CVE-2026-102424 | 29 Sep 2026 | CVSS 7.5 | balbooa.com Balbooa Forms extension for JoomlaJoomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 -… | |
| CVE-2026-102425 | 29 Sep 2026 | CVSS 10.0 | balbooa.com Balbooa Forms extension for JoomlaJoomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports… | |
| CVE-2026-101126 | 29 Sep 2026 | CVSS 6.5 | balbooa.com Balbooa Forms extension for JoomlaJoomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission processes JSON arrays per upload… | |
| CVE-2026-101127 | 29 Sep 2026 | CVSS 9.4 | balbooa.com Balbooa Forms extension for JoomlaJoomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form upload endpoint validates… | |
| CVE-2026-101112 | 29 Sep 2026 | CVSS 5.3 | balbooa.com Balbooa Forms extension for JoomlaJoomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action accepts an… | |
| CVE-2026-56291 | 9 Jul 2026 | CVSS 9.8 | Balbooa Forms Unrestricted Upload of File with Dangerous TypeJoomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to… | Exploited |