{"id":"CVE-2026-94130","title":"Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.","summary":"Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-89"],"vendor":"joomlaboat","product":"youtube_gallery","affected":["youtube_gallery < 5.7.3"],"patched":["youtube_gallery 5.7.3"],"published":"2026-09-26","updated":"2026-10-15","sourceUpdated":"2026-10-15T13:49:22.587","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-94130","references":[{"url":"https://joomlaboat.com/youtube-gallery","label":"security@joomla.org"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.00421,"epssPercentile":0.36222,"exploits":{"github":1,"githubRepos":["https://github.com/murrez/CVE-2026-94130"],"checkedAt":"2026-10-27T19:23:38.381Z"},"exploitAvailable":true,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-26T22:58:28.777566Z"},"scores":{"nvd":9.8,"cna":9.3},"ingestedAt":"2026-09-26T14:34:20.440Z","slug":"CVE-2026-94130","body":"## Overview\n\nJoomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.\n\n## Affected\n\n- `youtube_gallery < 5.7.3`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `youtube_gallery 5.7.3`","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":222345,"id":"CVE-2026-94130","ts":1792073287182,"field":"cvss","old":"9.3","new":"9.8"},{"seq":211602,"id":"CVE-2026-94130","ts":1790510786186,"field":"exploit_available","old":"false","new":"true"}]}