Advisories · Technology

balbooa.com Balbooa Forms component for Joomla.

Every CVE that names balbooa.com Balbooa Forms component for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65880 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3
- balbooa.com Balbooa Forms component for Joomla
- Code injection
Not analysed yet 28 Jul 2026
CVE-2025-49485 CVE record

CVSS 8.6 High

Extension - balbooa.com - SQL injection in Balbooa Forms component version 1.0.0 - 2.3.1.1 for Joomla
- balbooa.com Balbooa Forms component for Joomla
- SQL injection
Not analysed yet 18 Jul 2025