EUVD-2026-50333

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox 2.20.2...

CVE-2026-66490

The vulnerability CVE-2026-66490 affects the Joomla Extension balbooa Gridbox prior to version 2.20.2. The issue is a stored cross-site scripting (XSS) vulnerability that can be triggered via a comment avatar, as described in multiple sources. The root cause is an input/output handling weakness i...