VulnFeed.org: balbooa.com Gridbox extension for Joomlahttps://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enCVE-2026-107129: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0https://vulnfeed.org/cve/CVE-2026-107129/https://vulnfeed.org/cve/CVE-2026-107129/Thu, 05 Nov 2026 17:58:05 +0000Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0CVE-2026-107903: Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0https://vulnfeed.org/cve/CVE-2026-107903/https://vulnfeed.org/cve/CVE-2026-107903/Thu, 05 Nov 2026 17:56:53 +0000Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0CVE-2026-105607: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0https://vulnfeed.org/cve/CVE-2026-105607/https://vulnfeed.org/cve/CVE-2026-105607/Thu, 05 Nov 2026 17:51:43 +0000Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0