| Package | Affected versions | Patched versions |
|---|---|---|
| gridbox | < 2.20.2 | 2.20.2 |
Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free