Security Advisory

CVE-2026-75115

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 12:14:13

Last updated 2026-08-21 19:19:09

Assigner Joomla

CVSS score 7.0

State PUBLISHED

Description

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

← Browse all CVEs View on cve.org ↗