Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: ordasoft.com Component: Real Estate Manager Clear all filters
TI-2026-64894 CVE-2026-100753 · GHSA-rm64-rq7m-j69j

Cross-site scripting in ordasoft.com Real Estate Manager extension for Joomla

Priority LOW 29

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) < 6.7.9 - The public property-detail page’s “leave a review” form repopulates its title field directly from the request with…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00149 Published 2026-09-28 No fix listed CWE-79
TI-2026-64893 CVE-2026-100752 · GHSA-rfcm-hchc-h7rw

SQL injection in ordasoft.com Real Estate Manager extension for Joomla

Priority MEDIUM 48

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9 - site/realestatemanager.php builds the ORDER BY clause of three separate frontend property-listing queries (category…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00319 Published 2026-09-28 No fix listed CWE-89