Update to the latest package before reporting a vulnerability.

Email support@joomtheme.com with the subject JoomTheme Gallery security report. Do not open a public issue before a coordinated fix is available.

Include the affected extension, JoomTheme Gallery version, Joomla/PHP versions, required privileges, reproduction steps and observed impact. Avoid accessing other users' data or performing destructive testing.

We will acknowledge a complete report, investigate it and coordinate disclosure with the reporter. Public details will be added to the Joomla changelog after a fixed release is available.