Threats Tagged 'ghsa-42xm-gwxc-xhg6'

CVE-2026-102786 is a high-severity authenticated stored cross-site scripting (XSS) vulnerability in the Phoca Gallery extension for Joomla versions 4.5.0 through 6.1.5. The flaw arises from improper neutralization of input during web page generation, specifically through HTML attribute injection. This vulnerability allows an authenticated attacker to inject malicious scripts that can execute with high confidentiality and integrity impact on affected systems.