CVE-2026-65890
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.24%
- 15th pct
- KEV
- No
- Class
- other
- CWE-89
Description
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.
References
Status: profiled · ingested 2026-08-05T18:00:56.000Z