CVE-2026-65889

The Joomla Extension from balbooa.com prior to version 2.20.2 is vulnerable to unauthenticated recursive directory deletion through the generateNewApp method, allowing attackers to delete directories without authentication. This vulnerability poses a significant risk to web applications using the affected extension, potentially leading to data loss and service disruption. Web administrators and developers utilizing this extension should prioritize updating to the latest version to mitigate this risk.