ordasoft.com Book Library extension for Joomla

2 known vulnerabilities in ordasoft.com Book Library extension for Joomla, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-101111 CVSS 5.3 medium Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Book Library (Free) < 6.4.6 - The public book-detail page template…
CVE-2026-101110 CVSS 9.3 critical Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6 - site/booklibrary.php’s books() function…