Phoca.cz phoca.cz Phoca Download extension for Joomla vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phoca.cz phoca.cz Phoca Download extension for Joomla: 3 record(s), with affected versions and fixes.
CVE-2026-102787
Medium · 5.3
CWE-352 Oct 27, 2026
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5
CVE-2026-76569
Medium · 5.3
CWE-79 Aug 20, 2026
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
CVE-2026-57828
High · 8.8
CWE-434 Jul 11, 2026
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.