CVE Catalog
CVE-2026-76613
CriticalCVSS 9.2Summary
YOOtheme Pro for Joomla versions 1.0.0-5.0.40 contains an SQL injection vulnerability that allows any contributor-level user to inject own content into SQL queries.
Risk Assessment
A user with low privileges can manipulate SQL queries, potentially leading to unauthorized data access or modification.
Recommendation
Upgrade YOOtheme Pro to a version newer than 5.0.40.
Original NVD description (English source)
Joomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.40 - An SQL injection allowed any contributor-level user to inject own content into SQL queries.