Skip to content
OpenAdvisories

Vendor

balbooa.com

31 known vulnerabilities.

Products

Gridbox extension for Joomla 20 Balbooa Forms extension for Joomla 7 Balbooa Forms component for Joomla 2 balbooa.com Balbooa Forms extension for Joomla 1 Balbooa Gallery component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-107130

    Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

    Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

    balbooa.com Gridbox extension for Joomla Web / CMS
  • Medium 6.3
    CVE-2026-102783

    Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0

    Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showImage action resolves a request-controlled path, calls that helper, and then ret…

    balbooa.com Gridbox extension for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-101126

    Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4

    Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission processes JSON arrays per upload field, checking only that IDs are numeric. Client-supplied filenames and display names are trusted directly, intr…

    balbooa.com Balbooa Forms extension for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-101112

    Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4

    Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action accepts an integer attachment ID and deletes the matching database row and file. The controller verifies a Joomla session …

    balbooa.com Balbooa Forms extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-66489

    Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2

    Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2

    balbooa.com Gridbox extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-66488

    Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2

    Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2

    balbooa.com Gridbox extension for Joomla Web / CMS
  • Medium 6.1
    CVE-2026-66490

    Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

    Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

    balbooa.com Gridbox extension for Joomla Web / CMS