Medium severity6.1NVD Advisory· Published Aug 7, 2023· Updated Jun 17, 2026

CVE-2023-38045

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS Targeting Non-Script Elements.

Affected products

Admiror Design Studio/Admiror Gallery
cpe:2.3:a:admiror-design-studio:admiror_gallery:*:*:*:*:*:joomla\!:*:*
Range: >=5.0.0,<=5.2.0
Joomla/oneVotellm-create
Admiror Design Studio.com/Admiror Gallery Component For Joomlav5
Range: 5.0.0-5.2.0

Patches

Vulnerability mechanics

References

extensions.joomla.org/extension/admiror-gallery/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000