Themexpert.com Jmedia Extension For Joomla
3 CVEs affecting Themexpert.com Jmedia Extension For Joomla. Latest disclosed: 2026-07-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-60034 | | 2026-07-20 | The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS. | |
CVE-2026-60033 | | 2026-07-20 | The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses. | |
CVE-2026-60032 | | 2026-07-20 | The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to RCE. Executable uploads/writes possible (incl. polyglot filenam… |