BA
Vendor
balbooa.com
25
CVEs
1
On KEV
9
New 30D
Products
BF10.0
Balbooa Forms extension for Joomla
balbooa.com
7 CVEs0 on KEV5 new
GE9.8
Gridbox extension for Joomla
balbooa.com
16 CVEs0 on KEV4 new
BB9.8
balbooa.com Balbooa Forms extension for Joomla
balbooa.com
1 CVEs1 on KEV0 new
BF10.0
Balbooa Forms component for Joomla
balbooa.com
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102788 New | GE Gridbox extension for Joomla balbooa.com | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 |
| CVE-2026-102789 New | GE Gridbox extension for Joomla balbooa.com | 9.3 | Oct 27 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 |
| CVE-2026-102783 | GE Gridbox extension for Joomla balbooa.com | 6.3 | Oct 8 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 |
| CVE-2026-102784 | GE Gridbox extension for Joomla balbooa.com | 8.7 | Oct 8 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 |
| CVE-2026-102424 | BF Balbooa Forms extension for Joomla balbooa.com | 7.5 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 |
| CVE-2026-102425 | BF Balbooa Forms extension for Joomla balbooa.com | 10.0 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101126 | BF Balbooa Forms extension for Joomla balbooa.com | 6.5 | Sep 29 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101112 | BF Balbooa Forms extension for Joomla balbooa.com | 5.3 | Sep 29 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 |
| CVE-2026-101127 | BF Balbooa Forms extension for Joomla balbooa.com | 9.4 | Sep 29 | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 |
| CVE-2026-67364 | BF Balbooa Forms extension for Joomla balbooa.com | 10.0 | Aug 19 | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 |
| CVE-2026-67363 | BF Balbooa Forms extension for Joomla balbooa.com | 7.7 | Aug 19 | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 |
| CVE-2026-65947 | GE Gridbox extension for Joomla balbooa.com | 7.3 | Jul 29 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 |
| CVE-2026-65888 | GE Gridbox extension for Joomla balbooa.com | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 |
| CVE-2026-65887 | GE Gridbox extension for Joomla balbooa.com | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 |
| CVE-2026-65886 | GE Gridbox extension for Joomla balbooa.com | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 |
| CVE-2026-65890 | GE Gridbox extension for Joomla balbooa.com | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 |
| CVE-2026-66489 | GE Gridbox extension for Joomla balbooa.com | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 |
| CVE-2026-66488 | GE Gridbox extension for Joomla balbooa.com | 5.3 | Jul 29 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 |
| CVE-2026-65889 | GE Gridbox extension for Joomla balbooa.com | 7.5 | Jul 29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 |
| CVE-2026-66490 | GE Gridbox extension for Joomla balbooa.com | 6.1 | Jul 29 | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 |
| CVE-2026-65884 | GE Gridbox extension for Joomla balbooa.com | 9.8 | Jul 29 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 |
| CVE-2026-65885 | GE Gridbox extension for Joomla balbooa.com | 8.8 | Jul 29 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 |
| CVE-2026-65880 | BF Balbooa Forms component for Joomla balbooa.com | 10.0 | Jul 28 | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 |
| CVE-2026-61425 | GE Gridbox extension for Joomla balbooa.com | 9.4 | Jul 20 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 |
| CVE-2026-56291 In wildKEV | BB balbooa.com Balbooa Forms extension for Joomla balbooa.com | 9.8 | Jul 9 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 |