CVE-2024-5737 HTML Injection in AdmirorFrames Joomla! Extension
Attackers can inject HTML into image data rendered by AdmirorFrames, enabling cross-site scripting attacks against Joomla users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-5737?
CVE-2024-5737 is a medium-severity cross-site scripting vulnerability in Nikola Vasilijevski AdmirorFrames, published on 28 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Script afGdStream.php in AdmirorFrames Joomla! extension doesn’t specify a content type and as a result default (text/html) is used. An attacker may embed HTML tags directly in image data which is rendered by a webpage as HTML. This issue affects AdmirorFrames: before 5.0.
Weakness: CWE-79
Which versions are affected by CVE-2024-5737?
It affects 1 product.
Products include Admiror-Design-Studio Admirorframes.
How do I fix CVE-2024-5737?
No fix has been published for CVE-2024-5737 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2024-5737 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5737 exists.
Public exploit code: 1 proofs of concept on GitHub.