CVE-2026-66917
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.
| CWE | CWE-79 |
| Vendor | joomgalleryfriends.net |
| Product | joomgallery extension for joomla |
| Published | Aug 22, 2026 |
| Last Updated | Aug 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for joomgalleryfriends.net joomgallery extension for joomla
Be the first to know when new unknown vulnerabilities affecting joomgalleryfriends.net joomgallery extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
joomgalleryfriends.net / JoomGallery extension for Joomla
4.0.0-4.3.0
Credits
Toan Le