critical9.8
CVE-2026-102428
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not proper…
Impact
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ordasoft | Joomla Cck | before 8.3.16 |