What’s Vulnerable › Products
balbooa.com Balbooa Forms extension for Joomla vulnerabilities
8 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your balbooa.com Balbooa Forms extension for Joomla version is affected
Exploited balbooa.com Balbooa Forms extension for Joomla vulnerabilities
- CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability
Latest balbooa.com Balbooa Forms extension for Joomla vulnerabilities
- CVE-2026-102425 — Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 (CVSS 10.0)
- CVE-2026-102424 — Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 (CVSS 7.5)
- CVE-2026-101127 — Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 (CVSS 9.4)
- CVE-2026-101126 — Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 (CVSS 6.5)
- CVE-2026-101112 — Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 (CVSS 5.3)
- CVE-2026-67364 — Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 (CVSS 10.0)
- CVE-2026-67363 — Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 (CVSS 7.7)
- CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability (CVSS 9.8) — exploited