{"vulnerability": "cve-2026-6003", "sightings": [{"uuid": "6d18bd14-670f-43c2-9390-a8c567764251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60032", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42rp2faa23", "content": "CVE-2026-60032 - jmedia extension for joomla\nThe JMedia extension in Joomla allows authorized users to upload any type of file, potentially allowing attackers to execute malicious code on the server. This is a serious issue\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:48:05.911795Z"}, {"uuid": "2265b3a8-b617-4ced-b3a0-c404117f309c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60034", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr42va6iol2e", "content": "CVE-2026-60034 - jmedia extension for joomla\nThe JMedia extension for Joomla allows attackers to inject malicious code into websites through unsanitised SVG uploads. This can happen when a user with administrative access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T19:50:04.701355Z"}, {"uuid": "ad09a778-a154-4636-8790-28b565b5265e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46cid2y42g", "content": "CVE-2026-60034 - Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension\nCVE ID : CVE-2026-60034\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsaniti...", "creation_timestamp": "2026-07-20T20:51:10.658703Z"}, {"uuid": "236c80c0-41d2-42b9-9b4c-dc8326624e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46shkvtn23", "content": "CVE-2026-60032 - Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia\nCVE ID : CVE-2026-60032\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upl...", "creation_timestamp": "2026-07-20T21:00:07.325546Z"}, {"uuid": "ebc47238-9515-49ca-b007-6d0cec56cb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr47vvpj5n2o", "content": "CVE-2026-60030 - Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder\nCVE ID : CVE-2026-60030\n \n Published : July 20, 2026, 7:17 p.m. | 25\u00a0minutes ago\n \n Description : The Joomla extension Quix Page Builder Pro is vulnerable to an...", "creation_timestamp": "2026-07-20T21:19:55.764958Z"}]}