Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Gridbox extension for Joomla — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Gridbox extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: balbooa.com

CVE IDTitleCVSSSeverityPublished
CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2 CWE-352--2026-07-29
CVE-2026-65888 Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 CWE-284 10.0 Critical2026-07-29
CVE-2026-65887 Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 CWE-284 10.0 Critical2026-07-29
CVE-2026-65886 Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 CWE-22 9.2 Critical2026-07-29
CVE-2026-65890 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 CWE-89 9.2 Critical2026-07-29
CVE-2026-66489 Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2 --2026-07-29
CVE-2026-66488 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2 --2026-07-29
CVE-2026-65889 Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2 CWE-284 9.2 Critical2026-07-29
CVE-2026-66490 Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2 CWE-79--2026-07-29
CVE-2026-65884 Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 CWE-284 10.0 Critical2026-07-29
CVE-2026-65885 Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 CWE-434 9.4 Critical2026-07-29
CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 CWE-288 9.4 Critical2026-07-20

All 12 known CVE vulnerabilities affecting Gridbox extension for Joomla with full Chinese analysis, references, and POCs where available.