CVE-2026-94130 — Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3

CVE-2026-94130

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 PUBLISHED

Description (CNA)

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.

Affected (CNA)

Vendor / product	Versions
joomlaboat.com / YouTube Gallery extension for Joomla	affected 1.0.0-5.7.2

CWE

CWE-89

References

https://joomlaboat.com/youtube-gallery

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.