Security Advisory

CVE-2026-56291

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-09 09:53:57
Last updated 2026-07-23 14:55:16
Assigner Joomla
CVSS score 10.0
State PUBLISHED

Description

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.