12 matches found
CVE-2018-11690
The CVE-2018-11690 entry matches a Joomla! Gridbox vulnerability: Balbooa Gridbox extension (version 2.4.0 and earlier) is affected by cross-site scripting due to improper validation of user-supplied input. An attacker can craft a URL to execute script in a victim’s browser within the site’s cont...
CVE-2026-65885
CVE-2026-65885 affects Joomla Extension Gridbox
CVE-2026-65884
CVE-2026-65884 affects Joomla Extension Gridbox < 2.20.2 by Balbooa. The issue is in the registration method, which allows users with provided usergroup IDs to create new accounts with administrative permissions, enabling unauthenticated account creation with high privileges. Public references...
CVE-2026-66488
Technical details about CVE-2026-66488 (affected Joomla Gridbox extension) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-66490
The vulnerability CVE-2026-66490 affects the Joomla Extension balbooa Gridbox prior to version 2.20.2. The issue is a stored cross-site scripting (XSS) vulnerability that can be triggered via a comment avatar, as described in multiple sources. The root cause is an input/output handling weakness i...
CVE-2026-65886
The CVE-2026-65886 issue affects Joomla Gridbox (balbooa)
CVE-2026-65888
The CVE concerns Joomla extension Gridbox by balbooa.com, with versions older than 2.20.2. The underlying issue is a vulnerability in the socialLogin method that can allow an attacker to log in as any user on the target site, i.e., an account takeover. The CVSS 4.0 score is 10.0 (CRITICAL) with n...
CVE-2026-65890
Summary: CVE-2026-65890 affects Joomla Extension Gridbox by balbooa.com, with unauthenticated SQL injection in Gridbox versions earlier than 2.20.2. The vulnerability allows unauthenticated actors to inject SQL via multiple vectors in queries, as indicated by the description and CVSS metrics (CRI...
CVE-2026-65947
CVE-2026-65947 affects the Joomla extension Gridbox (balbooa.com) prior to version 2.20.2, with multiple CSRF vectors in the admin interface. The exposed issue arises from CSRF weaknesses in Gridbox’s admin area, leading to potential unauthorized actions authenticated sessions could perform. The ...
CVE-2026-65887
CVE-2026-65887 affects the Joomla Extension Gridbox by balbooa.com (versions earlier than 2.20.2). The vulnerability arises from an insecure resetPassword function that allows unauthenticated actors to reset any user password (excluding super admins), enabling login as those users and performing ...
CVE-2026-66489
Technical details about CVE-2026-66489 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds to obtain affected versions, impact, and remediation once disclosed.