CVE-2026-65887
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPassword method allows actors to reset any user password, allowing to login and act as these users - excluding super admins.
| CWE | CWE-284 |
| Vendor | balbooa.com |
| Product | gridbox extension for joomla |
| Published | Jul 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for balbooa.com gridbox extension for joomla
Be the first to know when new unknown vulnerabilities affecting balbooa.com gridbox extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
balbooa.com / Gridbox extension for Joomla
1.0.0-2.20.1
References
Credits
Phil Taylor