← Back

Balbooa

balbooa

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Gridbox
gridbox
1 CVE
Forms
forms
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-56291
1Balbooa
1Forms
Jul 11, 2026
Jul 9, 2026
10.0 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
CVE-2018-11690
1Balbooa
1Gridbox
Nov 21, 2024
Jun 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerabilit...Show more
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.Show less