3 matches found
CVE-2026-101112
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms 2.4.3.4 - The public removeTmpAttachment action accepts an integer attachment ID and deletes the matching database row and file. The controller verifies a Joomla session token, but the model does not bind that ...
6.9CVSS0.00295EPSS
SaveExploits0References1
EUVD-2026-89097
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms 2.4.3.4 - The public removeTmpAttachment action accepts an integer attachment ID and deletes the matching database row and file. The controller verifies a Joomla session token, but the model does not bind that ...
6.9CVSS5.8AI score0.00295EPSS
SaveExploits0References1
20