CVE-2026-102428

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 PUBLISHED

Description (CNA)

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.

Affected (CNA)

Vendor / product	Versions
ordasoft.com / OrdaSoft Joomla CCK	affected 1.0.0-8.3.15

CWE

CWE-89

References

https://www.ordasoft.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.