CVE-2026-65890 — Critical vulnerability brief

Joomla Extension – balbooa.com – Unauthenticated SQL injection in Gridbox < 2.20.2 – Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.

CVSS base score: 9.2 / 10

View NVD record