Security Advisory

CVE-2026-74803

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-19 13:39:24
Last updated 2026-08-21 04:48:18
Assigner Joomla
CVSS score 10.0
State PUBLISHED

Description

Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbitrary files when the client-supplied Content-Type falls within the image MIME group.