CVE-2026-102424High 8.9Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.40.4%
CVE-2026-102425Critical 9.5Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.40.6%
CVE-2026-101126Medium 6.9Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.40.2%
CVE-2026-101112Medium 6.9Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.40.2%
CVE-2026-101127High 8.6Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.40.3%
CVE-2026-67364Critical 10.0Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.20.5%
CVE-2026-67363High 7.7Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.20.6%