Balbooa.com vulnerabilities
31 CVEs and advisories name Balbooa.com as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-107129Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
- CVE-2026-107130Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0
- CVE-2026-107903Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0
- CVE-2026-105607Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0
- CVE-2026-102788Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2
- CVE-2026-102789Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
- CVE-2026-102783Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0
- CVE-2026-102784Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0
- CVE-2026-102424Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
- CVE-2026-102425Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
- CVE-2026-101126Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
- CVE-2026-101112Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
- CVE-2026-101127Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
- CVE-2026-67364Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
- CVE-2026-67363Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2
- CVE-2026-65947Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
- CVE-2026-65888Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
- CVE-2026-65887Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
- CVE-2026-65886Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2
- CVE-2026-65890Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
- CVE-2026-66489Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
- CVE-2026-66488Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
- CVE-2026-65889Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2
- CVE-2026-66490Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
- CVE-2026-65884Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2
- CVE-2026-65885Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2
- CVE-2026-65880Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3
- CVE-2026-61425Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
- CVE-2026-56291Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1
- CVE-2025-49485Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla