CVE-2026-97165 – Joomla Extension – svenbluege.de – Reflected XSS and open redirect in Event Gallery extens

Joomla Extension – svenbluege.de – Reflected XSS and open redirect in Event Gallery extension < 6.5.0 – The “return” parameter is base64-decoded and written to the “Back” link without being validated.