CVE-2026-102789
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller, it omits the GridboxHelper::checkUserEditLevel() check.
| CWE | CWE-284 |
| Vendor | balbooa.com |
| Product | gridbox extension for joomla |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for balbooa.com gridbox extension for joomla
Be the first to know when new unknown vulnerabilities affecting balbooa.com gridbox extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
balbooa.com / Gridbox extension for Joomla
1.0.0-2.20.4.1
Credits
Artur Błażewicz