balbooa.com Gridbox extension for Joomla

• CVE-2026-107129 Medium 5.5 Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0 0.4%
• CVE-2026-107130 Medium 6.9 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0 0.4%
• CVE-2026-107903 High 8.3 Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0 0.3%
• CVE-2026-105607 High 8.3 Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0 0.3%
• CVE-2026-102788 Critical 9.3 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 0.4%
• CVE-2026-102789 Critical 9.3 Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 0.3%
• CVE-2026-102783 Medium 6.3 Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 0.5%
• CVE-2026-102784 High 8.7 Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 0.2%
• CVE-2026-65947 High 7.3 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 0.2%
• CVE-2026-65888 Critical 10.0 Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 0.5%
• CVE-2026-65887 Critical 10.0 Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 0.5%
• CVE-2026-65886 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 0.6%
• CVE-2026-65890 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 0.5%
• CVE-2026-66489 Medium 5.3 Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 0.3%
• CVE-2026-66488 Medium 5.3 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 0.3%
• CVE-2026-65889 Critical 9.2 Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 0.4%
• CVE-2026-66490 Medium 6.1 Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 0.3%
• CVE-2026-65884 Critical 10.0 Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 0.5%
• CVE-2026-65885 Critical 9.4 Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 0.5%
• CVE-2026-61425 Critical 9.4 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 0.6%