Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ordasoft.com Component: Book Library Clear all filters
TI-2026-65136 CVE-2026-101111 · GHSA-6cm5-gmw8-jj23

Cross-site scripting in ordasoft.com Book Library extension for Joomla

Priority LOW 29

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template, site/views/view_book/tmpl/default.php, echoes the raw title request parameter direct…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00149 Published 2026-09-28 No fix listed CWE-79
TI-2026-65135 CVE-2026-101110 · GHSA-hv58-qqxr-w5r2

SQL injection in ordasoft.com Book Library extension for Joomla

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function reads the field and direction request parameters and passes each through a function…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-28 No fix listed CWE-89