CVE-2026-77029

The Joomla Extension from yootheme.com is vulnerable due to missing CSRF tokens on front-end state changes in versions prior to 4.1.66, allowing attackers to perform unauthorized actions on behalf of users. This could lead to potential data manipulation or unauthorized access, impacting the integrity of user interactions. Web administrators and developers using this extension should prioritize updating to the latest version to mitigate the risk.