150 matches found
CVE-2026-107903
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox 2.20.5.0...
CVE-2026-107130
Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox 2.20.5.0...
CVE-2026-107129
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox 2.20.5.0...
CVE-2026-105607
Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox 2.20.5.0...
CVE-2026-107129 Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox 2.20.5.0...
CVE-2026-107129
The Joomla Extension - balbooa.com product, specifically the Gridbox component in versions prior to 2.20.5.0 , is vulnerable to unauthenticated arbitrary file deletion . The root cause is a path traversal vulnerability (CWE-22), which allows an attacker to delete files outside the intended direct...
CVE-2026-107129 Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox 2.20.5.0...
EUVD-2026-117629
Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox 2.20.5.0...
EUVD-2026-117628
Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox 2.20.5.0...
CVE-2026-107130
The Joomla Extension - balbooa.com , specifically the Gridbox component, is vulnerable to an unauthenticated deletion of submission and field files in versions prior to 2.20.5.0 . The root cause involves Missing Authorization (CWE-862) and an Authorization Bypass Through User-Controlled Key (CWE-...
CVE-2026-107130 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox 2.20.5.0...
CVE-2026-107130 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox 2.20.5.0...
CVE-2026-107903
The Joomla Extension by balbooa.com contains a Stored XSS vulnerability in the reviews section. The root cause is inconsistent sanitization within the Gridbox component. This affects versions of Gridbox prior to 2.20.5.0 . The vulnerability allows an attacker to execute malicious scripts in the c...
CVE-2026-107903 Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox 2.20.5.0...
CVE-2026-107903 Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox 2.20.5.0...
EUVD-2026-117627
Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox 2.20.5.0...
CVE-2026-105607 Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox 2.20.5.0...
CVE-2026-105607 Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0
Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox 2.20.5.0...