joomlaboat has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 9.0 (critical), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.0
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
Weakness classes
Products
- Extra Search 1
- youtube_gallery 1
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-94130Critical· 9.8Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.66CVE-2017-20281High· 8.2Joomla! Component Extra Search 2.2.8 SQL Injection57
joomlaboat vulnerabilities
CVEs affecting joomlaboat, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-94130Critical· 9.8PoCJoomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries.
▾ Abyssaljoomlaboat · youtube_galleryEPSS 0.42%via NVD
CVE-2017-20281High· 8.2PoCJoomla! Component Extra Search 2.2.8 SQL Injection
Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter. Attackers can send GET requests to…
▾ MidnightJoomlaboat · Extra SearchEPSS 0.48%via CVEORG