{"affected":[{"defaultStatus":"unaffected","packageName":"com_gridbox","product":"Gridbox extension for Joomla","source":"CNA: Joomla","vendor":"balbooa.com","versions":[{"status":"affected","version":"1.0.0-2.20.4.2"}]}],"cveId":"CVE-2026-105607","cwes":["CWE-79"],"description":"Joomla Extension - balbooa.com - Unauthenticated stored XSS in the \"Recent Comments / Recent Reviews\" widget in Gridbox < 2.20.5.0","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.3,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","version":"3.1"}],"modifiedAt":1793908640286,"publishedAt":1793901103797,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.balbooa.com/gridbox"}],"remediation":[],"revision":"1887575e1325cd55b5b1e10d565fd7bf66b162b17d794e1d7e1d942c9c5a19a7","sources":[{"modifiedAt":1793908640286,"name":"CNA: Joomla","retrievedAt":1793909552430,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105607"}],"ssvc":{"assessedAt":1793908636059,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Joomla Extension - balbooa.com - Unauthenticated stored XSS in the \"Recent Comments / Recent Reviews\" widget in Gridbox < 2.20.5.0","updatedAt":1793909552430}