balbooa.com / balbooa.com Balbooa Forms extension for Joomla
10.0 · CVSS 4.0CriticalCISA KEV
CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.
Description
Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.