GE
Product
Gridbox extension for Joomla
16
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 7High 5Medium 4Low 0
Watch
Add Gridbox extension for Joomla to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65888 | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-65887 | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-65890 | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-65884 | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-61425 | 9.4 | Jul 20 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 Affected: 1.0.0-2.20.0.2 |
| CVE-2026-102788 New | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 Affected: 1.0.0-2.20.4.1 |
| CVE-2026-102789 New | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 Affected: 1.0.0-2.20.4.1 |
| CVE-2026-65885 | 8.8 | Jul 29 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-102784 | 8.7 | Oct 8 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 Affected: 1.0.0-2.20.3.1 |
| CVE-2026-65886 | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-65889 | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-65947 | 7.3 | Jul 29 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-102783 | 6.3 | Oct 8 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 Affected: 1.0.0-2.20.3.1 |
| CVE-2026-66490 | 6.1 | Jul 29 | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-66489 | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
| CVE-2026-66488 | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 Affected: 1.0.0-2.20.1 |
Showing 16