CVE-2021-47930

HighPublic PoC

Published: 10 May 2026

Published

10 May 2026

Modified

12 May 2026

KEV Added

—

Patch

—

CVSS Score v4 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0031 22.6th percentile

Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2021-47930 is a high-severity SQL Injection (CWE-89) vulnerability in Balbooa Joomla Forms (inferred from references). Its CVSS base score is 8.8 (High).

Operationally, ranked at the 22.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

OWASP Top 10 for Web (2025)

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2021-34792

Vulnerability details

Balbooa Joomla Forms Builder 2.0.6 contains an unauthenticated SQL injection vulnerability in the form submission handler that allows remote attackers to execute arbitrary SQL queries. Attackers can send POST requests to the com_baforms component with malicious JSON payloads in the…

'id' field parameter to extract sensitive database information.