Privilege Escalation in Gridbox by Balbooa

CVE-2026-65884

What is CVE-2026-65884?

The Gridbox extension for Joomla by Balbooa contains a privilege escalation vulnerability that allows unauthenticated users to specify user group IDs during account registration. This flaw enables unauthorized individuals to create accounts with administrative permissions, which poses a significant risk to the security of the Joomla site. It's crucial for users of this extension to upgrade to version 2.20.2 or later to mitigate this security threat.

References