JoomGallery vulnerabilities
3 known CVE vulnerabilities in JoomGallery, translated and rated.
- CVE-2026-84048Medium
Joomla Extension JoomGallery prior to 4.4.1 contains unauthenticated arbitrary file upload via the TUS endpoint. However, neither file name nor file extension are under attacker control, and code execution requires non-standard server configuration.
- CVE-2026-66917High
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.
- CVE-2026-66916Medium
Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in JoomGallery's category JSON view. When a gallery category is protected with a password, the HTML view correctly enforces the password gate - but the JSON view ( format=json ) skips this check entirely.