CVE-2026-94130: Joomlaboat.com YouTube Gallery Extension For Joomla

Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.

Affected products

• Joomlaboat.com YouTube Gallery Extension For Joomla: version 1.0.0-5.7.2 only

Published 2026-09-26. Last modified 2026-09-29.