{"id":"CVE-2026-102788","aliases":[],"title":"Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2","titleSource":"Joomla","descriptionSource":"Joomla","products":[{"vendor":"balbooa.com","name":"Gridbox extension for Joomla","platforms":[],"versions":[{"version":"1.0.0-2.20.4.1","status":"affected"}],"defaultStatus":"unaffected","source":"Joomla","url":"https://www.cve.org/CVERecord?id=CVE-2026-102788"}],"remediation":[],"description":"Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPosts(). When the parameter does not match known sorting keys, it is prefixed with a table alias and inserted into the ORDER BY clause without checking against an allowlist","severity":"critical","score":9.3,"published":"2026-10-27T09:30:08.133Z","modified":"2026-10-27T09:30:08.133Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.balbooa.com/gridbox"],"sources":[{"name":"CVE","id":"CVE-2026-102788","modified":"2026-10-27T09:30:08.133Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-102788"}],"assessments":[{"source":"Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.3}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T16:50:32.247Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}