Medium · 6.9 CVE-2026-76610 EUVD-2026-63237GHSA-5qx9-5vj6-wf25

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65

Published Aug 20, 2026 · Updated Aug 21, 2026 · Assigned by Joomla

Vendor: yootheme.com Product: Zoo extension for Joomla Category: Web / CMS

Description

Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint lacked ACL checks, allowing unauthorized tag modifications by unauthenticated users.

Affected products

Vendor	Product	Affected	Fixed
yootheme.com	Zoo extension for Joomla	1.0.0-4.1.64	—

References

https://www.yootheme.com/ product