CVE-2026-66488

Description

References

• mysites.guru/blog/gridbox-23-critical-vulnerabilities · Third Party Advisory
• balbooa.com/gridbox · Product

gridbox의 다른 취약점

• CVE-2026-65947높음 7.3Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
• CVE-2026-65888심각 9.8Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method allows actors to login as any g…
• CVE-2026-65887심각 9.8Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to re…
• CVE-2026-65886높음 7.5Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo viewer allows unauthenticated attackers…
• CVE-2026-66490보통 6.1Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2