Medium · 6.5 CVE-2026-23900 EUVD-2026-21678

Extension - phoca.cz - Stored XSS vectors in Phoca Maps component 5.0.0 - 6.0.2 for Joomla

Published Apr 11, 2026 · Updated Apr 14, 2026 · Assigned by Joomla

Description

Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.

Vendor	Product	Affected	Fixed
phoca.cz	phoca.cz - Phoca Maps for Joomla	5.0.0-6.0.2	—