agentprime: balbooa-com-gridbox-extension-for-joomlaEvery new CVE for balbooa-com-gridbox-extension-for-joomla.https://agentprime.io/CVE-2026-107129: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0https://agentprime.io/advisories/CVE-2026-107129/https://agentprime.io/advisories/CVE-2026-107129/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:58:05 GMTCVECVE-2026-107130: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0https://agentprime.io/advisories/CVE-2026-107130/https://agentprime.io/advisories/CVE-2026-107130/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:57:57 GMTCVECVE-2026-107903: Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0https://agentprime.io/advisories/CVE-2026-107903/https://agentprime.io/advisories/CVE-2026-107903/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:56:53 GMTCVECVE-2026-105607: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0https://agentprime.io/advisories/CVE-2026-105607/https://agentprime.io/advisories/CVE-2026-105607/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:51:43 GMTCVECVE-2026-102788: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2https://agentprime.io/advisories/CVE-2026-102788/https://agentprime.io/advisories/CVE-2026-102788/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 09:30:08 GMTCVEcriticalCVE-2026-102789: Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2https://agentprime.io/advisories/CVE-2026-102789/https://agentprime.io/advisories/CVE-2026-102789/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 09:23:55 GMTCVEcriticalCVE-2026-102783: Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0https://agentprime.io/advisories/CVE-2026-102783/https://agentprime.io/advisories/CVE-2026-102783/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 12:37:54 GMTCVECVE-2026-102784: Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0https://agentprime.io/advisories/CVE-2026-102784/https://agentprime.io/advisories/CVE-2026-102784/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 12:32:09 GMTCVECVE-2026-65947: Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65947/https://agentprime.io/advisories/CVE-2026-65947/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 14:00:50 GMTCVECVE-2026-65888: Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65888/https://agentprime.io/advisories/CVE-2026-65888/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:59:27 GMTCVEcriticalCVE-2026-65887: Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65887/https://agentprime.io/advisories/CVE-2026-65887/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:58:23 GMTCVEcriticalCVE-2026-65886: Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65886/https://agentprime.io/advisories/CVE-2026-65886/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:58:16 GMTCVEcriticalCVE-2026-65890: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65890/https://agentprime.io/advisories/CVE-2026-65890/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:56:21 GMTCVEcriticalCVE-2026-66489: Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-66489/https://agentprime.io/advisories/CVE-2026-66489/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:55:28 GMTCVECVE-2026-66488: Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-66488/https://agentprime.io/advisories/CVE-2026-66488/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:55:19 GMTCVECVE-2026-65889: Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65889/https://agentprime.io/advisories/CVE-2026-65889/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:54:52 GMTCVEcriticalCVE-2026-66490: Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-66490/https://agentprime.io/advisories/CVE-2026-66490/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 13:54:24 GMTCVECVE-2026-65884: Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65884/https://agentprime.io/advisories/CVE-2026-65884/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 12:09:08 GMTCVEcriticalCVE-2026-65885: Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2https://agentprime.io/advisories/CVE-2026-65885/https://agentprime.io/advisories/CVE-2026-65885/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jul 2026 12:05:48 GMTCVEcriticalCVE-2026-61425: Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0https://agentprime.io/advisories/CVE-2026-61425/https://agentprime.io/advisories/CVE-2026-61425/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 18:45:51 GMTCVEcritical