agentprime: balbooa-com-balbooa-forms-extension-for-joomlaEvery new CVE for balbooa-com-balbooa-forms-extension-for-joomla.https://agentprime.io/CVE-2026-102424: Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4https://agentprime.io/advisories/CVE-2026-102424/https://agentprime.io/advisories/CVE-2026-102424/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:07:25 GMTCVECVE-2026-102425: Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4https://agentprime.io/advisories/CVE-2026-102425/https://agentprime.io/advisories/CVE-2026-102425/CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:04:35 GMTCVEcriticalCVE-2026-101126: Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4https://agentprime.io/advisories/CVE-2026-101126/https://agentprime.io/advisories/CVE-2026-101126/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:02:38 GMTCVECVE-2026-101112: Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4https://agentprime.io/advisories/CVE-2026-101112/https://agentprime.io/advisories/CVE-2026-101112/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:00:26 GMTCVECVE-2026-101127: Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4https://agentprime.io/advisories/CVE-2026-101127/https://agentprime.io/advisories/CVE-2026-101127/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 16:57:36 GMTCVECVE-2026-67364: Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2https://agentprime.io/advisories/CVE-2026-67364/https://agentprime.io/advisories/CVE-2026-67364/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:00:55 GMTCVEcriticalCVE-2026-67363: Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2https://agentprime.io/advisories/CVE-2026-67363/https://agentprime.io/advisories/CVE-2026-67363/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 13:00:45 GMTCVECVE-2026-56291: Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1https://agentprime.io/advisories/CVE-2026-56291/https://agentprime.io/advisories/CVE-2026-56291/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 10 Jul 2026: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.15 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 09:53:57 GMTCVEcriticalKEV