Zoo extension for Joomla — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Zoo extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-76612	Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66 CWE-79	8.6	High	2026-08-21
CVE-2026-76611	Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66 CWE-22	6.9	Medium	2026-08-21
CVE-2026-77028	Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66 CWE-79	5.3	Medium	2026-08-21
CVE-2026-77029	Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66 CWE-352	4.6	Medium	2026-08-21
CVE-2026-76610	Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 CWE-352	6.9	Medium	2026-08-20
CVE-2026-74803	Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 CWE-434	10.0	Critical	2026-08-19
CVE-2026-75114	Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 CWE-601	5.1	Medium	2026-08-19
CVE-2026-74804	Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64 CWE-89	9.3	Critical	2026-08-19

All 8 known CVE vulnerabilities affecting Zoo extension for Joomla with full Chinese analysis, references, and POCs where available.