CVE-2026-56291

balbooa.com Balbooa Forms extension for Joomla code execution via unauthenticated upload in forms add-on

critical · 10.0

Known exploited

balbooa.com Balbooa Forms extension for Joomla

Published Jul 9, 2026, 09:53 UTC

Description

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.