high8.6
CVE-2026-66917
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS e…
Impact
Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in every visitor's browser.
Affected products
| Product | Affected versions |
|---|---|
| JoomGallery | before 4.4.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.