This vulnerability (CVE-2025-22205) involves improper limitation of a pathname to a restricted directory (CWE-22) in the Admiror Gallery extension for Joomla. Versions 4.0.0 through 4.5.0 are affected. The flaw allows attackers to perform path traversal attacks by manipulating input variables, potentially leading to unauthorized access to files outside the intended directory scope. The CVSS 3.1 vector indicates it is remotely exploitable without authentication or user interaction and results in high confidentiality impact without affecting integrity or availability. No vendor advisory or patch information is currently provided.

Successful exploitation can lead to unauthorized disclosure of sensitive files on the affected system due to path traversal. The vulnerability does not impact integrity or availability according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected component and monitor for suspicious activity related to path traversal attempts. No official remediation or temporary fix is currently documented.