Skip to content
OpenAdvisories

Vendor

ordasoft.com

14 known vulnerabilities.

Products

OrdaSoft Joomla Gallery free extension for Joomla 4 OrdaSoft Joomla Gallery extension for Joomla 4 OrdaSoft Joomla CCK 2 Real Estate Manager (Free) extension for Joomla 2 Vehicle Manager (Free) extension for Joomla 2 Book Library (Free) extension for Joomla 2 OrdaSoft Simple Membership extension for Joomla 1 Touch Slider extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-102781

    Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6

    Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispatcher, is the single handler behind every data-management operation this module …

    ordasoft.com Touch Slider extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-101111

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute …

    ordasoft.com Book Library (Free) extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-101109

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request parameter directly into a double-quoted HTML attribute with no output encoding of any kind…

    ordasoft.com Vehicle Manager (Free) extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-100753

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its title field directly from the request with no escaping and no filtering function o…

    ordasoft.com Real Estate Manager (Free) extension for Joomla Web / CMS