EUVD-2026-63934
GHSA-2g95-5crg-wg8w
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-delivered CSRF requires high-privileged victim interaction (PR:H, UI:R); integrity impact is low and scoped to the vulnerable system only.
Primary rating from Vendor (joomla).
CVSS VectorVendor: joomla
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
1DescriptionCVE.org
Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66
AnalysisAI
CSRF protection is absent on front-end state-changing operations in YOOtheme's Zoo Joomla extension before version 4.1.66, enabling an attacker to forge requests that alter application state on behalf of a high-privileged authenticated user. Exploitation requires luring a logged-in administrator or privileged Zoo user to interact with a malicious page while their session is active. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the victim holds high privileges (PR:H) in the Zoo Joomla extension and must actively interact with attacker-controlled content (UI:A) - for example, clicking a link or visiting a page containing a hidden CSRF payload. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 4.6 (medium) reflects meaningful exploitation barriers: PR:H indicates the victim must hold high privileges in the application, and UI:A requires active user interaction, making mass-exploitation automation infeasible. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker identifies a target Joomla site running Zoo and crafts a malicious web page containing a hidden form that submits a state-changing request to the Zoo front-end endpoint. The attacker then socially engineers a logged-in Zoo administrator into visiting that page - via phishing email or a compromised third-party site - causing the victim's browser to silently perform the forged action using their active privileged session. … |
| Remediation | Upgrade YOOtheme Zoo to version 4.1.66 or later, which introduces proper CSRF token validation on front-end state-changing endpoints. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today