https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T15:23:10.473308+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-102789 fkie_cve-2026-102789 2026-10-28T15:23:10.501031+00:00

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller, it omits the GridboxHelper::checkUserEditLevel() check.

 https://db.gcve.eu/vuln/ghsa-rhxp-7mw6-3gpp GHSA-rhxp-7mw6-3gpp 2026-10-28T15:23:10.501306+00:00

Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller, it omits the GridboxHelper::checkUserEditLevel() check.