Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-77028 EUVD-2026-63936GHSA-84gv-j7pq-p96w

Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66

Published Aug 21, 2026 · Updated Aug 21, 2026 · Assigned by Joomla

Vendor: yootheme.com Product: Zoo extension for Joomla Category: Web / CMS

Description

Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66

Affected products

VendorProductAffectedFixed
yootheme.com Zoo extension for Joomla 1.0.0-4.1.65 —

References