CVE-2025-22205
Published Feb 4, 2025Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.
Vendor archive
admiror-design-studio CVEs
Beta · best-effort5 CVEs tagged to vendor admiror-design-studio — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2024-5737
Published Jun 28, 2024Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in im…
CVE-2024-5736
Published Jun 28, 2024Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from local…
CVE-2024-5735
Published Jun 28, 2024Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue af…
CVE-2023-38045
Published Aug 7, 2023Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Scrip…
Showing 1-5 of 5 CVEsPage 1 of 1