CVE-2026-66488

Description

References

• mysites.guru/blog/gridbox-23-critical-vulnerabilities · Third Party Advisory
• balbooa.com/gridbox · Product

Autres vulnérabilités de gridbox

• CVE-2026-65947ÉLEVÉE 7.3Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
• CVE-2026-65888CRITIQUE 9.8Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any g…
• CVE-2026-65887CRITIQUE 9.8Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to re…
• CVE-2026-65886ÉLEVÉE 7.5Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers…
• CVE-2026-66490MOYENNE 6.1Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2