Exploited: 178
LatestCVE-2026-116779 — FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
VulnFeed.org
AREN

balbooa.com Gridbox extension for Joomla vulnerabilities and fixes

Exploited and high-severity balbooa.com Gridbox extension for Joomla vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.3CVE-2026-107129Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0Verify fixbalbooa.com Gridbox extension for Joomla
    1 min read
  2. 8.6CVE-2026-107903Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0Verify fixbalbooa.com Gridbox extension for Joomla
    1 min read
  3. 8.6CVE-2026-105607Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox < 2.20.5.0Verify fixbalbooa.com Gridbox extension for Joomla
    1 min read
Esc