Path Traversal in Yootheme.com Zoo Extension For Joomla

CVE-2026-76611

Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66.

Vulnerability class: Path Traversal (Directory Traversal)