SSRF in Themexpert.com Jmedia Extension For Joomla

CVE-2026-60033

Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.004 (32.0th percentile) — read the EPSS interpretation.