← Database

CVE-2026-75115

N/A CVSS: N/A Published: 2026-08-21 Modified: 2026-08-26

Description

Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.

Affected Platforms

Unknown

Weakness Type

CWE-22

References