CVE-2026-101109
6.1
/ 中危
2026-09-28
19h16 +00:00
19h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5.8 - The public vehicle-detail page (task=view) echoes the title request parameter directly into a double-quoted HTML attribute with no output encoding of any kind. A double-quote character in the parameter closes the attribute, allowing arbitrary markup, including a