CVE Catalog
CVE-2026-65890
CriticalCVSS 9.2Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Joomla Extension Gridbox below version 2.20.2 has multiple SQL injection vectors allowing an unauthenticated attacker to inject SQL queries.
Risk Assessment
An attacker can read, modify, or delete data in the database, leading to data confidentiality and integrity breaches.
Recommendation
Update Gridbox to version 2.20.2 or later.
Original NVD description (English source)
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.