VULNERABILITY INTELLIGENCE

CVE-2025-49486

EPSS probability0.35%

CISA KEVNot currently listed

Published2025-07-18

Last modified2026-06-17

Description

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.