ordasoft.com Vehicle Manager extension for Joomla

2 known vulnerabilities in ordasoft.com Vehicle Manager extension for Joomla, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-101109 CVSS 5.3 medium Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page…
CVE-2026-101108 CVSS 9.3 critical Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8 - site/vehiclemanager.php reads the…