CVE-2024-5737
Severity:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
28/06/2024
Last modified:
28/06/2024
Description
Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.