Balbooa Forms component for Joomla vulnerabilities

2 known vulnerabilities in Balbooa Forms component for Joomla from Balbooa.com. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Balbooa Forms component for Joomla: Improper Control of Generation of Code

  CVE-2026-65880Jul 28, 2026Balbooa.com

  Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type.

• 8.6 High severity

  Balbooa Forms component for Joomla: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-49485Jul 18, 2025Balbooa.com

  A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.