Skip to content
OpenAdvisories

Vendor

phoca.cz

17 known vulnerabilities.

Products

Phoca Commander extension for Joomla 5 Phoca Cart extension for Joomla 4 Phoca Download extension for Joomla 2 Phoca Gallery extension for Joomla 1 Phoca Maps extension for Joomla 1 Phoca Guestbook extension for Joomla 1 phoca.cz - Phoca Maps for Joomla 1 phoca.cz - Phoca Commander for Joomla 1 phoca.cz Phoca Download extension for Joomla 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-102787

    Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

    Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

    phoca.cz Phoca Download extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-76569 Public exploit

    Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

    Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

    phoca.cz Phoca Download extension for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-76565 Public exploit

    Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

    Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7

    phoca.cz Phoca Cart extension for Joomla Web / CMS
  • Medium 6.1
    CVE-2026-66492 Public exploit

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 6.4
    CVE-2026-66493 Public exploit

    Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-65765

    Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.1

    Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vulnerabilities.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-65764

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Commander 5.0.0-6.1.1 - Improper validation of user inputs lead to a reflective XSS vulnerability.

    phoca.cz Phoca Commander extension for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-65762

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability.

    phoca.cz Phoca Guestbook extension for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-65763

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4

    Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.0.4 - Improper validation of user inputs lead to a reflective XSS vulnerability.

    phoca.cz Phoca Maps extension for Joomla Web / CMS
  • Medium 6.5
    CVE-2026-23900

    Extension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla

    Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.

    phoca.cz phoca.cz - Phoca Maps for Joomla Web / CMS