Log in Start free

balbooa.com

Products

ProductCVEsExploitedLatest
balbooa.com Balbooa Forms extension for Joomla11Jul 9, 2026
Gridbox extension for Joomla20–Nov 5, 2026
Balbooa Forms extension for Joomla7–Sep 29, 2026
Balbooa Forms component for Joomla2–Jul 28, 2026
Balbooa Gallery component for Joomla1–Jul 18, 2025

Exploited and recent CVEs

  • CVE-2026-56291 Critical 10.0 Exploited Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 14.9%
  • CVE-2026-107129 Medium 5.5 Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 0.4%
  • CVE-2026-107130 Medium 6.9 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0 0.4%
  • CVE-2026-107903 High 8.3 Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0 0.3%
  • CVE-2026-105607 High 8.3 Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0 0.3%
  • CVE-2026-102788 Critical 9.3 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 0.4%
  • CVE-2026-102789 Critical 9.3 Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 0.3%
  • CVE-2026-102783 Medium 6.3 Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 0.5%
  • CVE-2026-102784 High 8.7 Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 0.2%
  • CVE-2026-102424 High 8.9 Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 0.4%
  • CVE-2026-102425 Critical 9.5 Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 0.6%
  • CVE-2026-101126 Medium 6.9 Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 0.2%
  • CVE-2026-101112 Medium 6.9 Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 0.2%
  • CVE-2026-101127 High 8.6 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 0.3%
  • CVE-2026-67364 Critical 10.0 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 0.5%
  • CVE-2026-67363 High 7.7 Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 0.6%
  • CVE-2026-65947 High 7.3 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 0.2%
  • CVE-2026-65888 Critical 10.0 Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 0.5%
  • CVE-2026-65887 Critical 10.0 Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 0.5%
  • CVE-2026-65886 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 0.6%
  • CVE-2026-65890 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 0.5%
  • CVE-2026-66489 Medium 5.3 Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 0.3%
  • CVE-2026-66488 Medium 5.3 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 0.3%
  • CVE-2026-65889 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 0.4%
  • CVE-2026-66490 Medium 6.1 Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 0.3%
  • CVE-2026-65884 Critical 10.0 Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 0.5%
  • CVE-2026-65885 Critical 9.4 Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 0.5%
  • CVE-2026-65880 Critical 10.0 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 0.8%
  • CVE-2026-61425 Critical 9.4 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 0.6%
  • CVE-2025-49485 High 8.6 Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla 0.3%