Ordasoft Joomla Cck
2 CVEs affecting Ordasoft Joomla Cck. Latest disclosed: 2026-10-05. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-102427 | Critical | 10.0 | 2026-09-30 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s… |
CVE-2026-102428 | Critical | 9.8 | 2026-10-05 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not proper… |