CVE-2026-102428
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.
| CWE | CWE-89 |
| Vendor | ordasoft.com |
| Product | ordasoft joomla cck |
| Published | Oct 5, 2026 |
| Last Updated | Oct 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for ordasoft.com ordasoft joomla cck
Be the first to know when new unknown vulnerabilities affecting ordasoft.com ordasoft joomla cck are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
ordasoft.com / OrdaSoft Joomla CCK
1.0.0-8.3.15