CVE-2026-102428 CRITICAL 9.3
Published: 2026-10-05 16:17:04 UTC · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Categories: Web servers & CMS
Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading to a SQL injection vector.
Weakness: CWE-89
Affected products
cpe:2.3:a:ordasoft:joomla_cck:*:*:*:*:*:joomla\!:*:*