Critical severity9.8NVD Advisory· Published Sep 26, 2026· Updated Oct 15, 2026
CVE-2026-94130
CVE-2026-94130
Description
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.
Affected products
2- Range: <5.7.3
Patches
Vulnerability mechanics
References
1- joomlaboat.com/youtube-gallerynvdProduct
News mentions
2- Joomla Extensions: Batch of 13 Vulnerabilities Includes Critical RCE, SQLi, and XSSVypr Intelligence · Sep 28, 2026
- Joomla Extensions: Four Critical RCE, SQLi, and Path Traversal Flaws Disclosed TogetherVypr Intelligence · Sep 26, 2026