{"affected":[{"defaultStatus":"unaffected","packageName":"com_gridbox","product":"Gridbox extension for Joomla","source":"CNA: Joomla","vendor":"balbooa.com","versions":[{"status":"affected","version":"1.0.0-2.20.4.2"}]}],"cveId":"CVE-2026-107903","cwes":["CWE-79"],"description":"Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.3,"severity":"high","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L","version":"3.1"}],"modifiedAt":1793906550130,"publishedAt":1793901413843,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://www.balbooa.com/gridbox"}],"remediation":[],"revision":"e4ba27066d4e359d1519940ba42f69e19caf7d8ffbfee25067a9c63a78e89070","sources":[{"modifiedAt":1793906550130,"name":"CNA: Joomla","retrievedAt":1793909557802,"url":"https://www.cve.org/CVERecord?id=CVE-2026-107903"}],"ssvc":{"assessedAt":1793906542380,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.0","updatedAt":1793909557802}