joomgalleryfriends.net

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

joomgalleryfriends.net records in CISA KEV

No joomgalleryfriends.net vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-47486 CVE-2026-66917 · GHSA-8vxv-gf52-gm5h

Cross-site scripting in joomgalleryfriends.net JoomGallery extension for Joomla

MEDIUM 40

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00518 Published 2026-08-22 No fix listed CWE-79

TI-2026-47485 CVE-2026-66916 · GHSA-g79m-pfhw-2c5m

Improper access control in joomgalleryfriends.net JoomGallery extension for Joomla

LOW 37

Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0043 Published 2026-08-22 No fix listed CWE-284

TI-2026-57798 CVE-2026-84048 · GHSA-x2gj-69fv-g59f

Improper access control in joomgalleryfriends.net JoomGallery extension for Joomla

LOW 29

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00503 Published 2026-09-15 No fix listed CWE-284

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0