VYPR

Joomla CCK

by Ordasoft

CVEs (1)

  • CVE-2026-102427CriSep 30, 2026
    risk 0.65cvss —epss —

    Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend routing (task=getContent), a task with no authentication or ACL check anywhere in the dispatch chain.…