← Back to CVE search

CVE-2026-65890

Gridbox

Description

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.

CVSS 9.8EPSS 0.27599999999999997%Risk 1
View source
Published
2026-07-29 14:16:33
Affected versions
<2.20.2
Type
Web application
Last modified
2026-08-05 17:24:46
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H