Back to CVE List

CVE-2026-65885

Vulnerability Description

Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. Turns into an authenticated RCE if combined with CVE-2026-65884 as the required account can be created by the attacker.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-434
Source
NVD
Vendor
balbooa.com
Product
Gridbox extension for Joomla

External References

Discussion (0)

Add Comment

No comments yet. Be the first!