Open Redirect Vulnerability in Zoo Joomla Extension by Yootheme
CVE-2026-75114

5.1MEDIUM

Key Information:

Vendor

Yootheme.com

Status
Zoo Extension For Joomla
Vendor
CVE Published:
19 August 2026

What is CVE-2026-75114?

The Zoo extension for Joomla by Yootheme contains an open redirect vulnerability in the CommentController::twitterAuthenticate() function. The issue arises because the referer request parameter is directly passed to the setRedirect() function without proper validation, allowing attackers to redirect users to malicious URLs. This flaw potentially exposes users to phishing attacks and undermines the integrity of the application's security.

Affected Version(s)

Zoo extension for Joomla 1.0.0-4.1.63

References

https://www.yootheme.com/
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor, mysites.guru
.