CVE-2026-94130: joomlaboat youtube_gallery

CVSS 9.8 (critical) · published 2026-09-26

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.

Affected products (NVD): joomlaboat youtube_gallery

Fixed in (NVD): 5.7.3

Weakness: CWE-89

Source: NVD CVE-2026-94130

References

• https://joomlaboat.com/youtube-gallery

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.