Login Request a demo
GR
Product
Gridbox
by Balbooa · last CVE Jul 29, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 4High 4Medium 4Low 0
Severity
All severities12Critical4High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gridbox to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-66490
6.1
0%
Jul 29
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2018-11690
6.1
33%
Jun 14
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input
Affected: through 2.4.0
CVE-2026-66489
5.3
0%
Jul 29
Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2
Affected: before 2.20.2
CVE-2026-66488
5.3
0%
Jul 29
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Affected: before 2.20.2
Showing 4