CVE-2026-77996

UNKNOWN View on NVD ↗

Description

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector.

References

https://www.yootheme.com/

Published: Aug 25, 2026 12:16 UTC Modified: Aug 25, 2026 13:19 UTC