CVE-2018-11690

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla!

MEDIUM gridbox

Description

The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.

Sévérité

6.1 Moyenne · CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Score retenu : NVD

Source	Sévérité d'origine	CVSS
NVD	MEDIUM	6.1 (v3.0)

Produit et versions

Produit: gridbox
Corrigée dans: Non précisée
Publiée: 14/06/2018
Modifiée: 17/06/2026
CWE: CWE-79

Versions concernées

gridbox — jusqu'à 2.4.0

Sources

NVD CVE-2018-11690 vu il y a 6 h

Ces informations proviennent des sources ci-dessus ; CVE Oyer n'y ajoute aucune interprétation.

Historique

Détectée via nvd26/09/2026 09:34 UTC