Search vulnerabilities

Results 5

Export CSV
CVE-2025-22205

Extension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Products
CVE-2024-5737

HTML Injection in AdmirorFrames Joomla! Extension

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 6.3 Medium EPSS 1.1% KEV · Not listed
Products
CVE-2024-5736

SSRF in AdmirorFrames Joomla! Extension

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 8.2 High EPSS 1.2% KEV · Not listed
Products
CVE-2024-5735

Full Path Disclosure in AdmirorFrames Joomla! Extension

Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before 5.0.

CVSS 4.0 · 6.3 Medium EPSS 1.5% KEV · Not listed
Products
CVE-2023-38045

Extension - admiror-design-studio.com - XSS in Admiror Gallery component for Joomla 5.0.0-5.2.0

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Products