Research · Jul 9, 2026 · ZeroDay Catalog
Critical Vulnerability in Balbooa Forms Allows Unauthenticated File Upload
A serious vulnerability in the Balbooa Forms Joomla extension permits unauthenticated file uploads, potentially leading to remote code execution.
What changed
The Balbooa Forms extension for Joomla has been identified with a critical vulnerability that allows for unrestricted file uploads. This flaw enables attackers to upload executable files without authentication, which can lead to complete remote code execution (RCE).
The vulnerability affects versions of Balbooa Forms prior to 2.4.1, making it imperative for users to assess their current installations.
Who is affected
The vulnerability impacts users of the Balbooa Forms extension, particularly those running versions below 2.4.1. This includes a wide range of Joomla users who rely on this extension for form management.
Organizations utilizing Joomla for their web applications should be particularly vigilant, as the flaw could expose sensitive data and systems to unauthorized access.
- Joomla users utilizing Balbooa Forms extension versions < 2.4.1
- Web developers and administrators managing Joomla sites
- Businesses relying on Joomla for customer interaction and data collection
What to do
It is crucial for affected users to immediately update the Balbooa Forms extension to version 2.4.1 or later to mitigate the risk of exploitation. Regularly monitoring for updates and patches is essential in maintaining security.
In addition, organizations should review their security policies regarding file uploads and implement additional measures to restrict file types and validate uploads.
- Update Balbooa Forms to version 2.4.1 or later
- Implement file type restrictions and validation for uploads
- Conduct a security audit of Joomla installations to identify potential vulnerabilities