BF
Product
Balbooa Forms extension for Joomla
by balbooa.com · last CVE Sep 29, 2026
7
CVEs
0
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 3High 2Medium 2Low 0
Watch

Add Balbooa Forms extension for Joomla to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102425
10.0
1%
Sep 29
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
Affected: 1.0.0-2.4.3.3
CVE-2026-67364
10.0
0%
Aug 19
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
Affected: 1.0.0-2.4.3.1
CVE-2026-101127
9.4
0%
Sep 29
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
Affected: 1.0.0-2.4.3.3
Showing 3