Gridbox extension for Joomla: unauthenticated stored XSS and file deletion
A flaw in a website-building tool lets anyone hack sites or delete files.
Summary
Several flaws in the Gridbox extension for Joomla let an unauthenticated attacker plant malicious scripts or delete files. Versions 1.0.0-2.20.4.2 are affected.
What to do
Check that you run a version newer than 2.20.4.2, and read the vendor's advisory at balbooa.com.
Products and platforms
CVE IDs
Times
First published
First seen