Security Advisory

CVE-2025-49486

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-18 09:50:54
Last updated 2025-07-20 08:52:51
Assigner Joomla
CVSS score not scored
State PUBLISHED

Description

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.