Lucene search
+L

6 matches found

NVD
NVD
•added 2026/09/28 7:16 p.m.•16 views

CVE-2026-101111

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

6.1CVSS0.00149EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/09/28 6:48 p.m.•13 views

EUVD-2026-88439

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

5.3CVSS6AI score0.00149EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/09/28 6:48 p.m.•51 views

CVE-2026-101111 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

5.3CVSS0.00149EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/09/28 6:48 p.m.•11 views

CVE-2026-101111 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

5.3CVSS6AI score0.00149EPSS
SaveExploits1References1
CVE
CVE
•added 2026/09/28 6:48 p.m.•21 views

CVE-2026-101111

The Joomla Extension - ordasoft.com - Book Library (Free) version

6.1CVSS6AI score0.00149EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•11 views

CVE-2026-101111: Improper Neutralization of Input During Web Page Generation

Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library Free 6.4.6 - The public book-detail page template, site/views/viewbook/tmpl/default.php, echoes the raw title request parameter directly into a double-quoted HTML attribute with no escaping function of any kind echo...

6.1CVSS6AI score0.00149EPSS
SaveExploits1References2
Rows per page
Query Builder