Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: joomgalleryfriends.net Clear all filters
TI-2026-57798 CVE-2026-84048 · GHSA-x2gj-69fv-g59f

Improper access control in joomgalleryfriends.net JoomGallery extension for Joomla

Priority LOW 29

Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00503 Published 2026-09-15 No fix listed CWE-284
TI-2026-47486 CVE-2026-66917 · GHSA-8vxv-gf52-gm5h

Cross-site scripting in joomgalleryfriends.net JoomGallery extension for Joomla

Priority MEDIUM 40

Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00518 Published 2026-08-22 No fix listed CWE-79