CVE-2026-60032
Vulnerability Description
The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to RCE. Executable uploads/writes possible (incl. polyglot filenames); chmod didn't strip execute bits.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-434
Source
NVD
Vendor
themexpert.com
Product
JMedia extension for Joomla
Discussion (0)
Add Comment
No comments yet. Be the first!