High severity8.2NVD Advisory· Published May 10, 2026· Updated May 12, 2026

CVE-2021-47930

Description

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com_baforms component with malicious JSON payloads in the 'id' field parameter to extract sensitive database information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Com Baformsinferred
Range: = 2.0.6
Package: https://wordpress.org/plugins/com_baforms
Balbooa/Joomla Forms Builderllm-create
Range: = 2.0.6

Patches

Vulnerability mechanics

References

www.balbooa.comnvd
www.exploit-db.com/exploits/50447nvd
www.vulncheck.com/advisories/balbooa-joomla-forms-builder-sql-injection-unauthenticatednvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000