CVE-2025-22205

CVE-2025-22205: Extension - admiror-design-studio.com - Path traversal in the Admiror Gallery 4.x component for Joomla

Vendor Www.admiror-Design-Studio.com

Product Admiror Gallery component for Joomla

Weakness CWE-35

Published February 4, 2025

Last update February 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper handling of input variables lead to multiple path traversal vulnerabilities in the Admiror Gallery extension for Joomla in version branch 4.x.

Key dates

02Disclosure timeline

February 4, 2025 CVE published

February 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-22205 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/35.html AskarLabs — CWE-35 write-up Path Traversal (Multiple Leading Dots)

Related vulnerabilities

04Related CVE

CVE-2025-49296 WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability CVE-2025-48317 WordPress WooCommerce Payment Gateway for Saferpay Plugin <= 0.4.9 - Path Traversal Vulnerability CVE-2025-52811 WordPress Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Local File Inclusion Vulnerability CVE-2025-26940 WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability CVE-2024-56213 WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability