CVE-2026-77028Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://www.yootheme.com/

Weakness type (CWE)

CWE-79CWE-601

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77028

Full discourse2 posts

YOOtheme@yootheme46d
Patch
🚨 Critical security update for ZOO We fixed 4 vulnerabilities: CVE-2026-76611: Path traversal CVE-2026-76612: Cross-site scripting CVE-2026-77028: External redirects CVE-2026-77029: CSRF attacks Update ZOO immediately to 4.1.66
Post summary
The advisory announces a critical update for ZOO, correcting four vulnerabilities and urging users to upgrade to version 4.1.66.
11010340
13.9K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-77028 Reflected XSS and Open Redirect in Joomla Zoo < 4.1.66 via Redirect Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-77028
Post summary
CVE-2026-77028 is a reflected XSS and open redirect vulnerability in Joomla Zoo versions below 4.1.66 triggered via the Redirect parameter.
00000109
4.1K followersView on X

Explore more

Back to dashboard