Cross-Site Request Forgery Vulnerability in Gridbox by Balbooa
CVE-2026-65947

7.3HIGH

Key Information:

Vendor

Balbooa.com

Status
Gridbox Extension For Joomla
Vendor
CVE Published:
29 July 2026

What is CVE-2026-65947?

The Gridbox extension for Joomla, developed by Balbooa, contains multiple Cross-Site Request Forgery (CSRF) vulnerabilities within its admin interface for versions prior to 2.20.2. These vulnerabilities allow an attacker to perform unauthorized actions on behalf of an authenticated user without their consent, potentially compromising sensitive data and the integrity of the application.

Affected Version(s)

Gridbox extension for Joomla 1.0.0-2.20.1

References

https://www.balbooa.com/gridbox
product
https://mysites.guru/blog/gridbox-23-critical-vulnerabili...
third-party-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor
.