SSRF in Themexpert.com Jmedia Extension For Joomla

CVE-2026-60033

The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses.

Vulnerability class: SSRF (Server-Side Request Forgery)