CVE-2026-107130: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

Q: Which deployments are exposed?

Joomla sites using the balbooa.com Gridbox extension with a version earlier than 2.20.5.0 are affected. The issue concerns deletion of submission and field files.

Q: Does exploitation require authentication or user interaction?

No. The vulnerability is described as unauthenticated, and the supplied vector indicates no privileges or user interaction are required.

Q: What is the likely impact of exploitation?

An attacker can delete submission or field files. The supplied impact data indicates low integrity impact and no confidentiality or availability impact.

Published Nov 5, 2026

Updated

Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

Event History

Nov 5, 2026

CVE Published

via MITRE·05:57 PM

Data Sourced

via MITRE·05:57 PM

DescriptionWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Joomla sites using the balbooa.com Gridbox extension with a version earlier than 2.20.5.0 are affected. The issue concerns deletion of submission and field files.

Does exploitation require authentication or user interaction?

No. The vulnerability is described as unauthenticated, and the supplied vector indicates no privileges or user interaction are required.

What is the likely impact of exploitation?

An attacker can delete submission or field files. The supplied impact data indicates low integrity impact and no confidentiality or availability impact.

CVE-2026-107130: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0

Event History

Frequently Asked Questions

Which deployments are exposed?

Does exploitation require authentication or user interaction?

What is the likely impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

Does exploitation require authentication or user interaction?

What is the likely impact of exploitation?