{"affected":[{"defaultStatus":"unaffected","packageName":"com_gridbox","product":"Gridbox extension for Joomla","source":"CNA: Joomla","vendor":"balbooa.com","versions":[{"status":"affected","version":"1.0.0-2.20.4.2"}]}],"cveId":"CVE-2026-107130","cwes":["CWE-862","CWE-639"],"description":"Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793905959000,"publishedAt":1793901477461,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.balbooa.com/gridbox"}],"remediation":[],"revision":"7003a9a59ae8b76569e9e8fcf250e0d4d828e9692ccddb381186d2dd09d34d78","sources":[{"modifiedAt":1793905959000,"name":"CNA: Joomla","retrievedAt":1793909556026,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107130"}],"ssvc":{"assessedAt":1793905120646,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0","updatedAt":1793909556026}