← CVE Intelligence

CVE-2025-49486

Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla PUBLISHED

Description (CNA)

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.

Affected (CNA)

Vendor / productVersions
balbooa.com / Balbooa Gallery component for Joomlaaffected 1.0.0-2.4.0

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.