Product by Balbooa
Gridbox extension for Joomla
12 known vulnerabilities in Gridbox extension for Joomla (Balbooa), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2018-11690 | Gridbox extension for Joomla: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2026-65887 | Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65884 | Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65888 | Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65890 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 | 9.8 | |
| Critical | CVE-2026-65886 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 | 7.5 | |
| Critical | CVE-2026-65885 | Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 | 8.8 | |
| Critical | CVE-2026-65889 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 | 7.5 | |
| High | CVE-2026-65947 | Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 | 7.3 | |
| Medium | CVE-2026-66490 | Balbooa.com Gridbox extension for Joomla: Cross-site Scripting | 6.1 | |
| Medium | CVE-2026-66489 | Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 | 5.3 | |
| Medium | CVE-2026-66488 | Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 | 5.3 |