Advisories · Technology
themexpert.com JMedia extension for Joomla.
Every CVE that names themexpert.com JMedia extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0
- themexpert.com JMedia extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0
- themexpert.com JMedia extension for Joomla
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0
- themexpert.com JMedia extension for Joomla
- Unrestricted file upload