Published: 14/06/2018 Updated: 21/11/2024

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

Vulnerable Product	Search on Vulmon	Subscribe to Product
balbooa gridbox

Joomla versions 240 and below suffer from a cross site scripting vulnerability in the Gridbox extension ...

CWE-79 https://nvd.nist.gov https://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html https://www.first.org/epss http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2018/Jun/26 http://www.securityfocus.com/archive/1/542066/100/0/threaded https://vel.joomla.org/resolved/2155-gridbox-com-gridbox-multiple-vulnerabilities https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11690 http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2018/Jun/26 http://www.securityfocus.com/archive/1/542066/100/0/threaded https://vel.joomla.org/resolved/2155-gridbox-com-gridbox-multiple-vulnerabilities https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11690

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-11690

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect