Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-102787

Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Phoca
Products
Phoca Download Extension For Joomla
CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Phoca
Products
Phoca Download Extension For Joomla
CVE-2026-57828

Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3

Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.

CVSS 4.0 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Phoca
Products
Download Phoca Download Extension For Joomla