Product by Balbooa
Balbooa Forms extension for Joomla
6 known vulnerabilities in Balbooa Forms extension for Joomla (Balbooa), 1 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-56291 | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2026-102425 | Balbooa.com Balbooa Forms extension for Joomla: Code Injection | 10.0 | |
| Critical | CVE-2026-101127 | Balbooa.com Balbooa Forms extension for Joomla: Cross-site Scripting | 9.4 | |
| High | CVE-2026-102424 | Balbooa.com Balbooa Forms extension for Joomla: Path Traversal | 7.5 | |
| Medium | CVE-2026-101126 | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 | 6.5 | |
| Medium | CVE-2026-101112 | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 | 5.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,