Critical severityNVD Advisory· Published Sep 26, 2026

CVE-2026-94130

Description

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.

Affected products

Joomla/Youtube Galleryllm-fuzzy
Range: <5.7.3
Joomlaboat/Com Youtubegalleryllm-fuzzy
Range: <5.7.3

Patches

Vulnerability mechanics

References

joomlaboat.com/youtube-gallerynvd

News mentions

No linked articles in our index yet.

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000