VYPR

JoomGallery

by Joomgalleryfriends.net

CVEs (1)

  • CVE-2026-84048MedSep 15, 2026
    risk 0.41cvss epss

    Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.1 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires…