Alex Joseph
Understanding the Joomla Event Gallery Vulnerability
A notable security flaw, identified as CVE-2026-97165, has been discovered in the Event Gallery extension for Joomla! This vulnerability presents a dual threat: reflected Cross-Site Scripting (XSS) and an open redirect. Essentially, these issues could allow an attacker to trick users into running malicious code in their browsers or redirect them to harmful websites. It’s a significant concern for anyone using this popular gallery extension on their Joomla! site.
CVE Details
The vulnerability impacts the Event Gallery extension, developed by svenbluege.de. It was publicly disclosed on September 27, 2026, and its information was last updated on October 27, 2026.
- Product: Joomla Extension – Event Gallery (svenbluege.de)
- Published Date: September 27, 2026
- Last Modified: October 27, 2026
- Severity: Medium (CVSS: 6.1)
- Status: Analyzed
Affected Products
This security vulnerability specifically affects versions of the Event Gallery extension for Joomla! that are older than 6.5.0. If your website is running any version prior to 6.5.0, it is susceptible to these attacks.
The core of the problem lies in how the extension handles a specific URL parameter, named “return.” This parameter is designed to redirect users back to a previous page after an action. However, the extension would decode it from base64 and use its value in the “Back” link without properly checking if the content was safe. This lack of validation creates an opening for attackers.
Current Status
As of October 27, 2026, this vulnerability has been analyzed and publicly disclosed. This means security researchers and the vendor have evaluated the issue, and information is available to help users understand and address the risk.
Severity Level
The vulnerability is rated as “Medium” severity with a CVSS score of 6.1. A medium rating indicates that while the vulnerability is not the most critical, it still poses a significant risk. An attacker could exploit it without needing complex techniques, potentially leading to unauthorized actions, data theft, or defacement of your website through cross-site scripting, or directing users to phishing sites via an open redirect. It’s crucial not to underestimate such threats.
Possible Solutions
To protect your Joomla! website from CVE-2026-97165, the most important step is to update your Event Gallery extension immediately. Users should upgrade to version 6.5.0 or any later version of the Event Gallery extension. These updated versions contain the necessary fixes to prevent the reflected XSS and open redirect attacks.
Always ensure your Joomla! core and all other extensions are kept up-to-date as a general security practice. Regular updates help patch known vulnerabilities and protect your site from various threats. For more tips on maintaining a secure Joomla! environment, consider reviewing Joomla! security best practices.
References
https://www.svenbluege.de/
