Threat database

25 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	10.0	EPSS 0.8%	CVE-2026-65880Balbooa Forms component for Joomla · Code Injection Critical10.0EPSS 0.8%2026-07-28CVE Database V5CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type. EPSS 0.8%Vulnerability balbooa.com #cwe-94	CVE Database V5	2026-07-28
Critical	9.4	EPSS 0.6%	CVE-2026-61425Gridbox extension for Joomla · Authentication Bypass Using an Alternate Path or Channel Critical9.4EPSS 0.6%2026-07-20CVE Database V5CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla extension Gridbox is vulnerable an authenticated bypass, potentially leading to full admin access. EPSS 0.6%Vulnerability balbooa.com #cwe-288	CVE Database V5	2026-07-20
Critical	10.0	KEVEPSS 14%	CVE-2026-56291balbooa.com Balbooa Forms extension for Joomla · Unrestricted Upload of File with Dangerous Type Critical10.0KEVEPSS 14%2026-07-09CVE Database V5CVE-2026-56291 Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE. KEVEPSS 14%Vulnerability balbooa.com #cwe-434	CVE Database V5	2026-07-09
High	8.6	EPSS 0.3%	CVE-2025-49485Balbooa Forms component for Joomla · Improper Neutralization of Special Elements used in an SQL Command High8.6EPSS 0.3%2025-07-18CVE Database V5CVE-2025-49485 A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter. EPSS 0.3%Vulnerability balbooa.com #cwe-89 Germany+9	CVE Database V5	2025-07-18
High	8.6	EPSS 0.3%	CVE-2025-49486Balbooa Gallery component for Joomla · Cross-site Scripting High8.6EPSS 0.3%2025-07-18CVE Database V5CVE-2025-49486 A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items. EPSS 0.3%Vulnerability balbooa.com #cwe-79 Germany+7	CVE Database V5	2025-07-18

Showing 21–25 of 25 results