Boletines de Vulnerabilidades

CVE-2025-49486

   
Software afectado JOOMLA
 
A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49486