FO
Product
Forms
by Balbooa · last CVE Sep 29, 2026
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 3High 1Medium 2Low 0
Watch

Add Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102424
7.5
0%
Sep 29
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
Affected: before 2.4.3.4
Showing 1