phoca.cz vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202616

Newest CVEs

• CVE-2026-102787

  Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

  phoca.cz · Phoca Download extension for Joomla

  Medium5.3
• CVE-2026-102786

  Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5

  phoca.cz · Phoca Gallery extension for Joomla

  High8.6
• CVE-2026-102775

  Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8

  phoca.cz · Phoca Cart extension for Joomla

  High8.7
• CVE-2026-76564

  Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7

  phoca.cz · Phoca Cart extension for Joomla

  High8.6
• CVE-2026-76569

  Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

  phoca.cz · Phoca Download extension for Joomla

  Medium5.3
• CVE-2026-76565

  Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

  phoca.cz · Phoca Cart extension for Joomla

  Medium5.3
• CVE-2026-74251

  Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6

  phoca.cz · Phoca Cart extension for Joomla

  Critical9.3
• CVE-2026-66491

  Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

  phoca.cz · Phoca Commander extension for Joomla

  High8.2
• CVE-2026-66492

  Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

  phoca.cz · Phoca Commander extension for Joomla

  Medium6.1
• CVE-2026-66493

  Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

  phoca.cz · Phoca Commander extension for Joomla

  Medium6.4