CVE-2026-65888 — Critical vulnerability brief

Joomla Extension – balbooa.com – Account takeover vulnerability in Gridbox < 2.20.2 – The socialLogin method allows actors to login as any given user on the target site.

CVSS base score: 10 / 10

View NVD record