July 21, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-60034NVD

Vulnerability Summary

The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS.
Severity Level
UNKNOWN
Published Date
Jul 20, 2026
Last Modified
Jul 21, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A

External References