Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Balbooa Forms extension for Joomla — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Balbooa Forms extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: balbooa.com

CVE ID Title CVSS Severity Published
CVE-2026-102424 Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4 CWE-22 8.9 High 2026-09-29
CVE-2026-102425 Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 CWE-94 9.5 Critical 2026-09-29
CVE-2026-101126 Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 CWE-22 6.9 Medium 2026-09-29
CVE-2026-101112 Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 CWE-639 6.9 Medium 2026-09-29
CVE-2026-101127 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 CWE-79 8.6 High 2026-09-29
CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 CWE-94 10.0 Critical 2026-08-19
CVE-2026-67363 Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 CWE-472 7.7 High 2026-08-19

All 7 known CVE vulnerabilities affecting Balbooa Forms extension for Joomla with full Chinese analysis, references, and POCs where available.