All 3 CVE vulnerabilities found in JMedia extension for Joomla, with AI-generated Chinese analysis, references, and POCs.
Vendor: themexpert.com
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-60034 | Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 CWE-79 | 9.4 | Critical | 2026-07-20 |
| CVE-2026-60033 | Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 CWE-918 | 5.1 | Medium | 2026-07-20 |
| CVE-2026-60032 | Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 CWE-434 | 9.4 | Critical | 2026-07-20 |
All 3 known CVE vulnerabilities affecting JMedia extension for Joomla with full Chinese analysis, references, and POCs where available.