Skip to content
OpenAdvisories

Vendor

balbooa.com

31 known vulnerabilities.

Products

Gridbox extension for Joomla 20 Balbooa Forms extension for Joomla 7 Balbooa Forms component for Joomla 2 balbooa.com Balbooa Forms extension for Joomla 1 Balbooa Gallery component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-102425 Public exploit

    Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4

    Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports administrator-defined PHP code which runs after a public form submission. The feature also supports form-field shortcodes in…

    balbooa.com Balbooa Forms extension for Joomla Web / CMS
  • High 7.7
    CVE-2026-67363 Public exploit

    Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2

    Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuthorize endpoints accept the charge total from a client-controlled request parameter and forward it to the payment gateway without recom…

    balbooa.com Balbooa Forms extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-56291 Exploited Public exploit Scanner template EPSS 15%

    Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

    Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

    balbooa.com balbooa.com Balbooa Forms extension for Joomla Web / CMS
    KEV Jul 10, 2026