SSRF Vulnerability in JMedia Extension by Joomla
CVE-2026-60033

5.1MEDIUM

Key Information:

Vendor

Themexpert.com

Status
Jmedia Extension For Joomla
Vendor
CVE Published:
20 July 2026

What is CVE-2026-60033?

The JMedia extension for Joomla is susceptible to a Server-Side Request Forgery (SSRF) vulnerability, allowing an attacker to manipulate the remote-URL download functionality. This could enable unauthorized access to restricted internal or reserved addresses, posing significant security risks to affected systems.

Affected Version(s)

JMedia extension for Joomla 1.0-1.5.4

References

https://www.themexpert.com/joomla-extensions/joomla-media...
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.