Known CVE

Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload

Joomla Balbooa Forms contains an unrestricted file upload vulnerability caused by lack of authentication checks, letting unauthenticated attackers upload executable files and achieve remote code execution.

CVE-2026-56291

Critical2026CVSS 9.8CWE-434

cve2026 · joomla · balbooa · baforms · file-upload · rce · vuln · kev

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website