What’s Vulnerable › Products
balbooa.com Gridbox extension for Joomla vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.
Check whether your balbooa.com Gridbox extension for Joomla version is affected
Latest balbooa.com Gridbox extension for Joomla vulnerabilities
- CVE-2026-102788 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 (CVSS 9.3)
- CVE-2026-102789 — Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 (CVSS 9.3)
- CVE-2026-102784 — Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 (CVSS 8.7)
- CVE-2026-102783 — Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 (CVSS 6.3)
- CVE-2026-65947 — Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 (CVSS 7.3)
- CVE-2026-65888 — Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 (CVSS 9.8)
- CVE-2026-65887 — Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 (CVSS 9.8)
- CVE-2026-65886 — Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 (CVSS 7.5)
- CVE-2026-66490 — Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 (CVSS 6.1)
- CVE-2026-66489 — Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 (CVSS 5.3)
- CVE-2026-66488 — Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 (CVSS 5.3)
- CVE-2026-65890 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 (CVSS 9.8)
- CVE-2026-65889 — Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 (CVSS 7.5)
- CVE-2026-65885 — Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 (CVSS 8.8)
- CVE-2026-65884 — Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 (CVSS 9.8)
- CVE-2026-61425 — Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 (CVSS 9.4)
- CVE-2018-11690 — (CVSS 6.1)