SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-66490

MEDIUM · CVSS 6.1 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-07-29 · Last synced 2026-08-28

CyberRota Analysis

AI-Generated

The Joomla extension from balbooa.com is vulnerable to stored cross-site scripting (XSS) through comment avatars in versions prior to 2.20.2. This flaw allows attackers to inject malicious scripts, potentially compromising user data and session integrity. Web administrators using this extension should prioritize updating to the latest version to mitigate the risk of exploitation.

CVE
CVE-2026-66490
Severity
MEDIUM
CVSS
6.1
EPSS
0.15%

Original NVD Description

Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-65947 HIGH CVE-2026-65888 CRITICAL CVE-2026-65887 CRITICAL CVE-2026-65886 HIGH CVE-2026-66489 MEDIUM CVE-2026-66488 MEDIUM