CVE-2026-66490

The Joomla Extension - balbooa.com (specifically Gridbox ) is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.20.2 . The vulnerability is triggered via a comment avatar , where improper neutralization of input during web page generation allows an attacker to execute malicio...