CVE-2026-88854 | OrdaSoft Joomla Gallery Extension up to 6.2.6 mod_osgallery_search getVar sql injection

SecurityVulns
Yanac

A vulnerability was found in OrdaSoft Joomla Gallery Extension up to 6.2.6. It has been declared as critical. Impacted is the function getVar of the component mod_osgallery_search. Such manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-88854. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More