CVE-2026-75114

Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate in Zoo 4.1.64 - The referer request parameter is passed straight to setRedirect with no validation...

CVE-2026-75114

The Joomla Zoo extension (versions before 4.1.64) passes the unsanitized referer request parameter directly to setRedirect() in CommentController::twitterAuthenticate(), enabling phishing via crafted redirect URLs. CVSS 5.1 (MEDIUM) with network access and user interaction required. No in-the-wil...

EUVD-2026-62433

Joomla Extension - yootheme.com - Open redirect in CommentController::twitterAuthenticate in Zoo 4.1.64 - The referer request parameter is passed straight to setRedirect with no validation...

PT-2026-78368

Name of the Vulnerable Software and Affected Versions Zoo versions prior to 4.1.64 Description An open redirect exists in the CommentController::twitterAuthenticate function. The issue occurs because the referer request parameter is passed directly to the setRedirect function without proper...