critical10.0
CVE-2026-74803
Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Co…
Impact
Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group.
Affected products
| Product | Affected versions |
|---|---|
| Zoo | before 4.1.64 |
Versions were read from the advisory text. No structured product data has been published for this record yet.