balbooa.com Gridbox extension for Joomla
16 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-102788 | 1.0.0-2.20.4.1 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 | CRITICAL 9.3 | 0.4 % | ||
| CVE-2026-102789 | 1.0.0-2.20.4.1 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-102783 | 1.0.0-2.20.3.1 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-102784 | 1.0.0-2.20.3.1 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 | HIGH 8.7 | 0.2 % | ||
| CVE-2026-65947 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 | HIGH 7.3 | 0.2 % | ||
| CVE-2026-65888 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-65887 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-65886 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 | CRITICAL 9.2 | 0.6 % | ||
| CVE-2026-65890 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 | CRITICAL 9.2 | 0.5 % | ||
| CVE-2026-66489 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-66488 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-65889 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 | CRITICAL 9.2 | 0.4 % | ||
| CVE-2026-66490 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-65884 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-65885 | 1.0.0-2.20.1 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 | CRITICAL 9.4 | 0.5 % | ||
| CVE-2026-61425 | 1.0.0-2.20.0.2 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 | CRITICAL 9.4 | 0.6 % |