CVE-2026-94130

Name of the Vulnerable Software and Affected Versions YouTube Gallery versions 1.0.0 through 5.7.2

Description An unauthenticated SQL injection exists in the video search functionality and the router that maps friendly video URLs to database rows. This flaw allows attackers to inject SQL commands into read queries without requiring authentication. Anyone capable of loading a page containing a gallery can exploit this issue.

Recommendations Update to version 5.7.3.