Joomla Extension - joomshaper.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3

Description

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type.

Affected Products

Vendor	Product	Versions
balbooa.com	balbooa forms component for joomla	1.0.0-2.4.2.1

References

https://www.balbooa.com/joomla-forms(product)

Related News (1 articles)

Tier C

VulDB1d ago

CVE-2026-65880 | Balbooa Forms Extension up to 2.4.2.1 Form Processing Logic signature code injection

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-94

PublishedJul 28, 2026

Trending Score31

Source articles1

Independent1

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-65884EXPKEV

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2

Trending: 101

NONECVE-2026-65885EXPKEV

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2

Trending: 92

NONECVE-2026-65886

Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2

Trending: 30

NONECVE-2026-65889

Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion in Gridbox < 2.20.2

Trending: 30

NONECVE-2026-65890

Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2

Trending: 30

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jul 28, 2026

Discovered by ZDM

Jul 28, 2026