CVE-2026-97165
Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated.
| CWE | CWE-601 CWE-79 |
| Vendor | svenbluege.de |
| Product | event gallery for joomla |
| Published | Sep 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for svenbluege.de event gallery for joomla
Be the first to know when new unknown vulnerabilities affecting svenbluege.de event gallery for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
svenbluege.de / Event Gallery for Joomla
1.0.0-6.0.0