CVE-2026-76569

Phoca Download 中通过搜索 GET 参数导致的反射型 XSS Phoca Download ≤ 6.1.4 — 已认证攻击者可通过用户控制面板中的构造搜索 URL 执行任意 JavaScript 摘要 用于 Joomla 的 Phoca Download（comphocadownload）在用户控制面板的文件搜索功能中存在反射型跨站脚本（XSS）漏洞。search GET 参数通过 Joomla 的 'string' 过滤器处理——该过滤器仅调用 striptags 并保留 " 字符——随后未经 htmlspecialchars 转义即被回显到 HTML...

Exploit for CVE-2026-76569

Reflected XSS via search GET Parameter in Phoca Download Ph...

CVE-2026-76569

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569

Phoca Download extension versions 5.0.0 through 6.1.4 for Joomla contains a reflected XSS flaw in the search GET parameter; attacker-supplied input is reflected unescaped, enabling script execution in a victim's browser. CVSS 4.0 scores it Medium (5.3). No exploitation or patch version is documen...

EUVD-2026-63211

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

CVE-2026-76569: Improper Neutralization of Input During Web Page Generation

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...

PT-2026-78903

Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...