5.3
CVE-2026-66488
- EPSS 0.2%
- Veröffentlicht 29.07.2026 13:55:19
- Zuletzt bearbeitet 05.08.2026 17:24:36
- CVE-Watchlists
- Unerledigt
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.106 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| CISA-ADP | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
CWE-285 Improper Authorization
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
https://www.balbooa.com/gridbox
https://mysites.guru/blog/gridbox-23-critical-vulnerabilities/