CVE-2026-107903

CVSS 8.6 (high) · published 2026-11-05

Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0

Weakness: CWE-79

Source: NVD CVE-2026-107903

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.