CVE-2026-60034
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 20, 2026
Vendor
unknown
Description
The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS.