BA
Vendor
Balbooa
19
CVEs
1
On KEV
5
New 30D
Products
FO10.0
Forms
Balbooa
6 CVEs1 on KEV5 new
GR9.8
Gridbox
Balbooa
12 CVEs0 on KEV0 new
BJ8.2
Balbooa Joomla Forms Builder
Balbooa
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102424 | FO Forms Balbooa | 7.5 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 |
| CVE-2026-102425 | FO Forms Balbooa | 10.0 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101126 | FO Forms Balbooa | 6.5 | Sep 29 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101112 | FO Forms Balbooa | 5.3 | Sep 29 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101127 | FO Forms Balbooa | 9.4 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 |
| CVE-2026-65947 | GR Gridbox Balbooa | 7.3 | Jul 29 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 |
| CVE-2026-65888 | GR Gridbox Balbooa | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 |
| CVE-2026-65887 | GR Gridbox Balbooa | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 |
| CVE-2026-65886 | GR Gridbox Balbooa | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 |
| CVE-2026-65890 | GR Gridbox Balbooa | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 |
| CVE-2026-66489 | GR Gridbox Balbooa | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 |
| CVE-2026-66488 | GR Gridbox Balbooa | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 |
| CVE-2026-65889 | GR Gridbox Balbooa | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 |
| CVE-2026-66490 | GR Gridbox Balbooa | 6.1 | Jul 29 | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 |
| CVE-2026-65884 | GR Gridbox Balbooa | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 |
| CVE-2026-65885 | GR Gridbox Balbooa | 8.8 | Jul 29 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 |
| CVE-2026-56291 In wildKEV | FO Forms Balbooa | 9.8 | Jul 9 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 |
| CVE-2021-47930 | BJ Balbooa Joomla Forms Builder Balbooa | 8.2 | May 10 | Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthenticated |
| CVE-2018-11690 | GR Gridbox Balbooa | 6.1 | Jun 14 | The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input |