CVE-2026-94130

Description

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-94130 ↗
• joomlaboat.com/youtube-gallery ↗

Related CVEs

• CVE-2026-97163lomart.fr / UP plugin for JoomlaCVSS 10.0
• CVE-2026-97161lomart.fr / UP plugin for JoomlaCVSS 9.2
• CVE-2026-97160lomart.fr / UP plugin for JoomlaCVSS 9.4
• CVE-2026-94132acymailing.com / AcyMailing Enterprise extension for JoomlaCVSS 9.5
• CVE-2026-100720froxlor / froxlorCVSS 9.3
• CVE-2026-100716froxlor / froxlorCVSS 9.4
• CVE-2026-100714froxlor / froxlorCVSS 9.4
• CVE-2026-100706kyverno / kyvernoCVSS 9.4