Known Vulnerabilities for Balbooa.com Balbooa Forms Extension For Joomla by Balbooa.com
Listed below are 9 of the newest known vulnerabilities associated with "Balbooa.com Balbooa Forms Extension For Joomla" by "Balbooa.com".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102425 json | Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4 - Balbooa Forms... | Not Provided | 2026-09-29 | 2026-10-01 |
| CVE-2026-102424 json | Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Bal... | Not Provided | 2026-09-29 | 2026-10-01 |
| CVE-2026-101127 json | Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The public form uplo... | Not Provided | 2026-09-29 | 2026-10-01 |
| CVE-2026-101126 json | Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submission processes JS... | Not Provided | 2026-09-29 | 2026-10-01 |
| CVE-2026-101112 json | Joomla Extension - balbooa.com - Unauthorized Deletion of Attachments in Balbooa Forms < 2.4.3.4 - The public removeTmpAttach... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-67364 json | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - The form's optional custom-PHP post... | Not Provided | 2026-08-19 | 2026-09-29 |
| CVE-2026-67363 json | Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2 - The stripeCharges and payAuth... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-65880 json | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing... | Not Provided | 2026-07-28 | 2026-07-28 |
| CVE-2026-56291 json | Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balboo... | Not Provided | 2026-07-09 | 2026-07-23 |