The YOOtheme Zoo extension for Joomla contains a critical unauthenticated file upload vulnerability that permits remote code execution.

The application fails to properly validate the contents of files uploaded through the image element, relying on client-supplied Content-Type headers. This allows unauthenticated attackers to upload malicious files disguised as images.

A CVSS score of 10.0 reflects the extreme risk posed by this vulnerability. Successful exploitation permits an attacker to upload web shells, leading to unauthorized access to the underlying server, data theft, and potential lateral movement within the hosting infrastructure.

Immediate Action: Update the Zoo extension to version 4.1.64 or the latest available version to enforce strict MIME-type and file extension validation.

Proactive Monitoring: Monitor server file systems for the creation of unauthorized PHP or executable files in web-accessible directories.

Compensating Controls: Deploy WAF rules to inspect and validate file upload traffic, rejecting any files that do not match expected image signatures.

Public Exploit Available: No

The severity of this flaw necessitates an immediate update to the latest patched version. Organizations should treat this as a high-priority incident to prevent potential server compromise.