12 matches found
CVE-2026-65886
The CVE-2026-65886 issue affects Joomla Gridbox (balbooa)
CVE-2026-65885
CVE-2026-65885 affects Joomla Extension Gridbox
CVE-2018-11690
The CVE-2018-11690 entry matches a Joomla! Gridbox vulnerability: Balbooa Gridbox extension (version 2.4.0 and earlier) is affected by cross-site scripting due to improper validation of user-supplied input. An attacker can craft a URL to execute script in a victim’s browser within the site’s cont...
CVE-2026-65884
CVE-2026-65884 affects Joomla Extension Gridbox < 2.20.2 by Balbooa. The issue is in the registration method, which allows users with provided usergroup IDs to create new accounts with administrative permissions, enabling unauthenticated account creation with high privileges. Public references...
CVE-2026-65888
The CVE concerns Joomla extension Gridbox by balbooa.com, with versions older than 2.20.2. The underlying issue is a vulnerability in the socialLogin method that can allow an attacker to log in as any user on the target site, i.e., an account takeover. The CVSS 4.0 score is 10.0 (CRITICAL) with n...
CVE-2026-65889
Joomla extension Gridbox (balbooa.com) for
CVE-2026-65890
Summary: CVE-2026-65890 affects Joomla Extension Gridbox by balbooa.com, with unauthenticated SQL injection in Gridbox versions earlier than 2.20.2. The vulnerability allows unauthenticated actors to inject SQL via multiple vectors in queries, as indicated by the description and CVSS metrics (CRI...
CVE-2026-65947
The Joomla Extension - balbooa.com Gridbox software is affected by multiple Cross-Site Request Forgery (CSRF) vectors located within its admin interface. This vulnerability affects versions prior to 2.20.2 . Specific technical details regarding the root cause or exploit methods are not provided i...
CVE-2026-66490
The Joomla Extension - balbooa.com (specifically Gridbox ) is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.20.2 . The vulnerability is triggered via a comment avatar , where improper neutralization of input during web page generation allows an attacker to execute malicio...
CVE-2026-65887
CVE-2026-65887 affects the Joomla Extension Gridbox by balbooa.com (versions earlier than 2.20.2). The vulnerability arises from an insecure resetPassword function that allows unauthenticated actors to reset any user password (excluding super admins), enabling login as those users and performing ...
CVE-2026-66488
The Joomla Extension - balbooa.com - Gridbox (versions prior to 2.20.2 ) is susceptible to a payment bypass vulnerability. This flaw allows for improper authorization, potentially enabling unauthorized transactions or bypassing payment requirements. While the vulnerability is documented, the spec...