CVE-2026-65880

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 PUBLISHED

Description (CNA)

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type.

Affected (CNA)

Vendor / product	Versions
balbooa.com / Balbooa Forms component for Joomla	affected 1.0.0-2.4.2.1

CWE

CWE-94

References

https://www.balbooa.com/joomla-forms

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.