CVE-2026-65947

The CVE concerns the Joomla Extension Gridbox by balbooa.com, with multiple CSRF vectors in the admin interface affecting Gridbox versions earlier than 2.20.2. The, underlying issue is a CSRF implementation flaw in the admin UI. The connected sources confirm the exposure is tied to Gridbox