joomgalleryfriends.net JoomGallery extension for Joomla

• CVE-2026-84048 Medium 6.3 Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 0.5%
• CVE-2026-66916 Medium 6.9 Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0 0.4%
• CVE-2026-66917 High 8.6 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 0.5%