Balbooa Forms Extension For Joomla
Monthly
Stored cross-site scripting in the Balbooa Forms extension for Joomla (all versions before 2.4.3.4) allows an unauthenticated attacker to embed script code in the original multipart filename of a file uploaded through any public-facing form that offers an upload field. The filename is saved verbatim to the component's attachments table and, when a Joomla administrator later opens the attacker's submission in the backend, the component's JavaScript concatenates that stored filename into an HTML string assigned to innerHTML, executing the script in the administrator's session; there is no public exploit identified at time of analysis, and while the vendor scores this CVSS 4.0 8.6, our independent assessment rates it CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N because the payload only fires on privileged human interaction and has limited confidentiality and integrity impact.
Stored cross-site scripting in the Balbooa Forms extension for Joomla (all versions before 2.4.3.4) allows an unauthenticated attacker to embed script code in the original multipart filename of a file uploaded through any public-facing form that offers an upload field. The filename is saved verbatim to the component's attachments table and, when a Joomla administrator later opens the attacker's submission in the backend, the component's JavaScript concatenates that stored filename into an HTML string assigned to innerHTML, executing the script in the administrator's session; there is no public exploit identified at time of analysis, and while the vendor scores this CVSS 4.0 8.6, our independent assessment rates it CVSS 3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N because the payload only fires on privileged human interaction and has limited confidentiality and integrity impact.