CVE-2018-25067

CVE-2018-25067 affects JoomGallery up to 3.3.3. The SQL injection vulnerability is in the Image Sort Handler, specifically in administrator/components/com_joomgallery/views/config/tmpl/default.php. Upgrading to 3.3.4 mitigates the issue (patch DC414EE954E849082260F8613E15A1C1E1D354A1; VDB-217569).