VYPR

Vehicle Manager (Free)

by Joomla

CVEs (1)

  • CVE-2026-101109MedSep 28, 2026
    risk 0.40cvss 6.1epss 0.00

    Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request parameter directly into a double-quoted HTML attribute with no output encoding of any kind. A double-quote…