afine-com/CVE-2024-5737

afine-com/CVE-2024-5737

GitHubGitHub
GitHubgithub.com
Releases0
AdmirorFrames Joomla! Extension < 5.0 - HTML Injection
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-5737↗
6.1 MEDIUM—

Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.