CVE-2026-77996
Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector.
| CWE | CWE-79 |
| Vendor | yootheme.com |
| Product | yootheme pro extension for joomla |
| Published | Aug 25, 2026 |
| Last Updated | Aug 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for yootheme.com yootheme pro extension for joomla
Be the first to know when new unknown vulnerabilities affecting yootheme.com yootheme pro extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
yootheme.com / YOOtheme Pro extension for Joomla
1.0.0-5.0.41