← Database

CVE-2026-56291

CRITICAL CVSS: 9.8 Published: 2026-07-09 Modified: 2026-07-24

Description

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected Platforms

Balbooa Forms

Weakness Type

CWE-434

References