CVE-2026-66490

Description

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

Affected Platforms

Weakness Type

CWE-79

References

• https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/
• https://www.balbooa.com/gridbox