Ordasoft Real Estate Manager
2 CVEs affecting Ordasoft Real Estate Manager. Latest disclosed: 2026-09-28. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100752 | Critical | 9.8 | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause o… |
CVE-2026-100753 | Medium | 6.1 | 2026-09-28 | Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” fo… |