VULNERABILITY INTELLIGENCE
CVE-2026-75114
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-08-19
Last modified2026-08-26
Description
Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 - The referer request parameter is passed straight to setRedirect() with no validation.
Weakness classification
- security@joomla.org: CWE-601