Phoca.cz vulnerabilities

Products

• Phoca Commander Extension For Joomla 5
• Phoca Cart Extension For Joomla 4
• Phoca Download Extension For Joomla 2

Newest

• phoca.cz phoca download extension for joomla Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 CVE-2026-102787 5.3 MediumOctober 27, 2026
• phoca.cz phoca gallery extension for joomla Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 CVE-2026-102786 8.6 HighOctober 23, 2026
• phoca cart, phoca.cz phoca cart extension for joomla +1 more Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 CVE-2026-102775 8.7 HighOctober 5, 2026
• phoca.cz phoca cart extension for joomla Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7 CVE-2026-76564 Public exploit 8.6 HighAugust 20, 2026
• phoca.cz phoca download extension for joomla Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4 CVE-2026-76569 Public exploit 5.3 MediumAugust 20, 2026
• phoca.cz phoca cart extension for joomla Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7 CVE-2026-76565 Public exploit 5.3 MediumAugust 20, 2026
• phoca.cz phoca cart extension for joomla Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 CVE-2026-74251 Public exploit 9.3 CriticalAugust 16, 2026
• phoca.cz phoca commander extension for joomla Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 CVE-2026-66491 Public exploit 8.2 HighAugust 7, 2026
• phoca.cz phoca commander extension for joomla Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 CVE-2026-66492 Public exploit 6.1 MediumAugust 7, 2026
• phoca.cz phoca commander extension for joomla Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3 CVE-2026-66493 Public exploit 6.4 MediumAugust 7, 2026
• phoca.cz phoca commander extension for joomla Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1 CVE-2026-65765 6.9 MediumJuly 27, 2026
• phoca.cz phoca commander extension for joomla Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1 CVE-2026-65764 5.1 MediumJuly 27, 2026
• phoca.cz phoca guestbook extension for joomla Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 CVE-2026-65762 5.1 MediumJuly 23, 2026
• phoca.cz phoca maps extension for joomla Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 CVE-2026-65763 5.1 MediumJuly 23, 2026
• phoca download, phoca.cz phoca download extension for joomla +1 more Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 CVE-2026-57828 9.0 CriticalJuly 11, 2026
• phoca maps, phoca.cz - phoca maps for joomla +1 more Extension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla CVE-2026-23900 6.5 MediumApril 11, 2026
• phoca.cz - phoca commander for joomla Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla CVE-2025-54473 9.2 CriticalAugust 15, 2025