CVE Catalog
CVE-2026-75114
MediumCVSS 5.1Summary
Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 - The referer request parameter is passed straight to setRedirect() with no validation.
Risk Assessment
The risk is the possibility of redirecting users to malicious websites, which could lead to credential theft or malware installation.
Recommendation
It is recommended to upgrade the Zoo extension to version 4.1.64 or later, which includes a fix for the referer parameter validation.
Original NVD description (English source)
Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate() in Zoo < 4.1.64 - The referer request parameter is passed straight to setRedirect() with no validation.