CVE-2024-5736

8.2 highEPSS 1.2%

High (8.2) in admiror-design-studio admirorframes. EPSS 1.2% chance of exploitation in the next 30 days.

Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to access local files or server pages available only from localhost. This issue affects AdmirorFrames: before 5.0.

Severity

CVSS 4.0

8.2 high

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:Y/R:U/V:D/RE:L/U:Green

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2024-06-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

admiror-design-studio:admirorframes

References

https://cert.pl/en/posts/2024/06/CVE-2024-5735/
https://cert.pl/posts/2024/06/CVE-2024-5735/
https://github.com/afine-com/CVE-2024-5736
https://github.com/sectroyer/CVEs/tree/main/CVE-2024-5736
https://github.com/vasiljevski/admirorframes/issues/3

Check your stack JSON