Skip to content
OpenAdvisories

Vendor

phoca.cz

17 known vulnerabilities.

Products

Phoca Commander extension for Joomla 5 Phoca Cart extension for Joomla 4 Phoca Download extension for Joomla 2 Phoca Gallery extension for Joomla 1 Phoca Maps extension for Joomla 1 Phoca Guestbook extension for Joomla 1 phoca.cz - Phoca Maps for Joomla 1 phoca.cz - Phoca Commander for Joomla 1 phoca.cz Phoca Download extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2026-102786

    Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5

    Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5

    phoca.cz Phoca Gallery extension for Joomla Web / CMS
  • High 8.7
    CVE-2026-102775

    Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8

    Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does not verify the download tokens it asks for. The d (download token) and o (order to…

    phoca.cz Phoca Cart extension for Joomla Web / CMS
  • High 8.6
    CVE-2026-76564 Public exploit

    Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7

    Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7

    phoca.cz Phoca Cart extension for Joomla Web / CMS
  • High 8.2
    CVE-2026-66491 Public exploit

    Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

    Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.

    phoca.cz Phoca Commander extension for Joomla Web / CMS