A CVSS 10.0 Unauthenticated Upload in YOOtheme ZOO, Fixed in 4.1.65

YOOtheme ZOO (com_zoo) up to 4.1.63 had an unauthenticated file upload RCE scored CVSS 10.0, plus an unauthenticated SQL injection. All three are fixed in 4.1.64, and 4.1.65 followed within the hour. Install 4.1.65.