CVE-2026-60032
Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to RCE. Executable uploads/writes possible (incl. polyglot filenames); chmod didn't strip execute bits.
| CWE | CWE-434 |
| Vendor | themexpert.com |
| Product | jmedia extension for joomla |
| Published | Jul 20, 2026 |
| Last Updated | Jul 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for themexpert.com jmedia extension for joomla
Be the first to know when new unknown vulnerabilities affecting themexpert.com jmedia extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
themexpert.com / JMedia extension for Joomla
1.0-1.5.4