CVE-2026-76612

UNKNOWN 0.0

Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector.

CWE	CWE-79
Vendor	yootheme.com
Product	zoo extension for joomla
Published	Aug 21, 2026

Stay Ahead of the Next One

Get instant alerts for yootheme.com zoo extension for joomla

Be the first to know when new unknown vulnerabilities affecting yootheme.com zoo extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

yootheme.com / Zoo extension for Joomla

1.0.0-4.1.65

References

NVD ↗ CVE.org ↗ EPSS Data ↗

yootheme.com: https://www.yootheme.com/

Credits

Phil Taylor, mysites.guru