Threat database

CVE-2026-102786 is a high-severity authenticated stored cross-site scripting (XSS) vulnerability in the Phoca Gallery extension for Joomla versions 4.5.0 through 6.1.5. The flaw arises from improper neutralization of input during web page generation, specifically through HTML attribute injection. This vulnerability allows an authenticated attacker to inject malicious scripts that can execute with high confidentiality and integrity impact on affected systems.

Phoca Cart extension for Joomla versions 5.0.0 through 6.1.8 contains an authorization bypass vulnerability. The order-file download endpoint does not properly verify download and order tokens, allowing any remote user, including unauthenticated guests, to download digital goods belonging to other customers by enumerating order IDs and supplying arbitrary non-empty tokens.

A stored cross-site scripting (XSS) vulnerability exists in the Phoca Cart extension for Joomla versions 5.0.0 through 6.1.7. The flaw allows an attacker to inject malicious scripts via the User-Agent header in the Admin Order View. This vulnerability has a high severity rating with a CVSS score of 8.6.

A reflected cross-site scripting (XSS) vulnerability exists in the Phoca Download extension for Joomla, versions 5.0.0 through 6.1.4. The flaw occurs via the search GET parameter, allowing improper neutralization of input during web page generation. This vulnerability has a medium severity rating with a CVSS score of 5.3.

A reflected cross-site scripting (XSS) vulnerability exists in the Phoca Cart extension for Joomla, affecting versions 5.0.0 through 6.1.7. The issue arises from improper neutralization of input in the price_from and price_to filter parameters, allowing potential injection of malicious scripts. The vulnerability has a medium severity with a CVSS score of 5.3.

An unauthenticated SQL injection vulnerability exists in the Phoca Cart extension for Joomla versions 5.0.0 through 6.1.16. The vulnerability arises from the a[] (attribute) and s[] (specification) GET parameters being concatenated directly into SQL WHERE clauses without proper parameterization or escaping. This flaw allows attackers to perform time-based blind SQL injection attacks to extract the full database.

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.

A reflected cross-site scripting (XSS) vulnerability exists in the Phoca Guestbook extension for Joomla versions 5.0.0 through 6.1.0. This vulnerability is due to improper validation of user inputs during web page generation, allowing malicious scripts to be reflected back to users. The issue is classified under CWE-79 and has a medium severity rating with a CVSS score of 5.1. No official patch or remediation guidance has been provided yet.

A reflected cross-site scripting (XSS) vulnerability exists in the Phoca Maps extension for Joomla versions 5.0.0 through 6.0.4. This vulnerability arises from improper validation of user inputs during web page generation, allowing malicious scripts to be reflected back to users. The issue is identified as CWE-79 and has a medium severity rating with a CVSS score of 5.1.

Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.

Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature.

EPSS 0.4%Vulnerabilityphoca.cz#cwe-434Germany+9