B
Vendor security profile1 actively exploited CVEs
balbooa
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical9
CISA KEV1
Public exploit1
Patch rate%0
Avg. CVSS8.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
12
0
5
0
CVE KEV
CVE severity distribution
17toplam CVE
Critical9 (53%)
High3 (18%)
Medium5 (29%)
Patch and exploitation view
%0
Verified patch
%6
CISA KEV
%6
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
16Unknown
Latest vulnerabilities
6.3
CVE-2026-102783
Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0
B
Patch status unknownEPSS %0
8.7
CVE-2026-102784
Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0
B
Patch status unknownEPSS %0
8.9
CVE-2026-102424
Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4
B
Patch status unknownEPSS %0
9.5
CVE-2026-102425
Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4
B
Patch status unknownEPSS %0
6.9
CVE-2026-101126
Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4
B
Patch status unknownEPSS %0
6.9
CVE-2026-101112
Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4
B
Patch status unknownEPSS %0
8.6
CVE-2026-101127
Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4
B
Patch status unknownEPSS %0
10.0
CVE-2026-67364
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
B
Patch status unknownEPSS %0
7.7
CVE-2026-67363
Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2
B
Patch status unknownEPSS %1
7.3
CVE-2026-65947
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
B
Patch status unknownEPSS %0