Description
A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| balbooa.com | Balbooa Forms component for Joomla | 1.0.0-2.3.1.1 | — |
Advisories 1
- WID-SEC-2025-1606 Joomla Extensions: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 20, 2025