CVE-2026-75115
CVE-2026-75115
Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40 - The Filesystem source's path filter is vulnerable to glob-based pattern attacks, allowing authorized users to read arbitrary files.
Vulnerability class: Path Traversal (Directory Traversal)
Weakness classification (CWE)
References
- security@joomla.org (product)