[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![CVEnew Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::821806287461740544.png) CVE [@CVEnew](/creator/twitter/CVEnew) on x 55K followers
Created: 2025-07-18 10:20:27 UTC

CVE-2025-49486 A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.


XXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1946153084922503247/c:line.svg)

[Post Link](https://x.com/CVEnew/status/1946153084922503247)