Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-77997

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

Description

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with com_template editing permissions to access information about arbitrary modules without the respective com_modules permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

yootheme.com YOOtheme Pro extension for Joomla

Default version status: unaffected

  • 1.0.0-5.0.41affected

References