CVE-2026-65947 is a Cross-Site Request Forgery (CSRF) vulnerability in the admin interface of the Gridbox extension for Joomla, developed by balbooa.com. The issue affects all versions from 1.0.0 up to and including 2.20.1. The vulnerability allows an attacker with low privileges to induce an authenticated administrator to perform unintended actions without their consent. The CVSS 3.1 base score is 7.3, indicating high severity, with impact on confidentiality and integrity but no impact on availability. No official patch or remediation details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to perform unauthorized administrative actions by exploiting CSRF vectors in the Gridbox extension's admin interface. This can lead to high impact on confidentiality and integrity of the affected Joomla site, potentially allowing unauthorized changes or data exposure. There is no indication of availability impact or known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should consider limiting access to the Gridbox admin interface to trusted users only and employ standard CSRF mitigations such as using anti-CSRF tokens and verifying request origins where possible. Monitor vendor communications for updates regarding patches or official mitigations.