balbooa.com Balbooa Forms extension for Joomla

6 known vulnerabilities in balbooa.com Balbooa Forms extension for Joomla, 2 critical, 1 actively exploited, with patch priority, exploit likelihood and the…

Recently exploited

  • CVE-2026-56291 CVSS 10.0 critical · actively exploited Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability

Latest vulnerabilities

  • CVE-2026-102425 CVSS 9.5 critical Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms supports…
  • CVE-2026-102424 CVSS 8.9 high Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms <…
  • CVE-2026-101127 CVSS 8.6 high Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form upload endpoint…
  • CVE-2026-101126 CVSS 6.9 medium Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission processes JSON arrays per…
  • CVE-2026-101112 CVSS 6.9 medium Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttachment action…
  • CVE-2026-56291 CVSS 10.0 critical · actively exploited Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability