CVE-2026-97165

UNKNOWN

Description

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated.

Timeline

Published:September 27th, 2026 12:17 PM

Last modified:September 30th, 2026 11:16 AM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-79 CWE-601

References & Reports

Advisories, patches, and third-party reports

https://www.svenbluege.de/

Source: NIST NVD · Data may lag official sources by up to one minute