Balbooa Forms Builder Pro 2.4.1

Security Update
This release addresses a security vulnerability affecting previous Forms versions

CVE: CVE-2026-56291

Security Fixes:

• Added server-side validation of allowed file extensions for frontend uploads based on the field configuration
• For the Upload File field, a new MIME Types option has been added to improve upload security
• Uploaded files now receive randomly generated server-side filenames instead of preserving client filenames
• Added CSRF protection to frontend file upload requests

Affected Versions: 2.4.0 and earlier

Action Required: Update to Forms 2.4.1 immediately

Acknowledgement: Vulnerability was responsibly disclosed by Phil E. Taylor

Added

• Joomla 6 Compatibility

Fixed

• Issue with a Signature field on hidden pages
• Issues with a text editor in the admin panel

v2.3.1.3​

Fixed

• Aria Label for checkbox, radio, poll and acceptance fields

v2.3.1.2​

Added

• Font Awesome 6 icon library
• Aria Label for the Acceptance field
• Full compatibility with Joomla update system

Fixed

• Cross-Site Scripting (XSS) web security vulnerability
• Fiscalization for payment gateway Cloudpayments

Added

• Accessible Design Option
• Aria Label for Submit button field
• Ability to navigate the form using a keyboard
• Full compatibility with the default Joomla plugin "Additional Accessibility Features"
• Built-in Google reCAPTCHA integration
• Fiscalization for payment gateways: Cloudpayments, Robokassa, and YooKassa
• Ability to set the time for the Submit Expiration Date

Fixed

• Issue related to form submitting limitation by IP address
• Small design issues in the admin panel

- not known

no change log for this version

Added

• Native compatibility with Joomla 5
• Undo or redo changes in the form editor
• Submission limitations
• Cloudflare Turnstile integration
• Google Sheets integration
• Google Drive integration

Updated

• Telegram integration

Fixed

• Issues with the code editor
• Issues with CLI commands
• Issues with complex conditional logic rules and PayPal integration.
• Creating PDF files in PHP 8.x
• CSS issue with calendar z-index
• CSS issue with displaying help text on mobile devices
• CSS issue with form templates in the editor
• Design styles for field calculation
• Issues with the settings panel in sidebar mode
• Issues with dark mode in Joomla 5

v.2.2.1

• Added: Compatibility with Joomla 5;
• Fixed: Issues with Joomla 5 admin template in dark mode;
• Fixed: Code editor in Joomla 5;
• Fixed: Issue with a signature field;
• Fixed: Issue with disabled reCAPTCHA plugin in Joomla plugins;
• Fixed: Issue with redirect after submit;
• Fixed: Issue with drag and drop field custom HTML.

v.2.2.0.2

• Fixed: Conflict of signature field and 3rd-party templates;
• Fixed: Issue with disabled Google's reCAPTCHA plugin;
• Fixed: Conflict with 3d-party redirects on site.

https://www.balbooa.com/blog/forms/balbooa-forms-2-2-management-improvements-and-more

changes