Skip to content

Exploited: 178

LatestCVE-2026-111494 — Incorrect validation of TLS certificates in the MatchPoint Android app

8.6

CVE-2026-105607Verify fix

Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0

balbooa.com Gridbox extension for Joomla2026-11-05 17:51 UTC1 min readRead in

Summary

Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0

Remediation

Inventory every balbooa.com Gridbox extension for Joomla deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://www.balbooa.com/gridbox