8 matches found
CVE-2026-76569
Reflected XSS via search GET Parameter in Phoca Download Phoca Download ≤ 6.1.4 — Authenticated Attacker Executes Arbitrary JavaScript via Crafted Search URL in User Control Panel SUMMARY Phoca Download comphocadownload for Joomla contains a reflected Cross-Site Scripting XSS vulnerability in the...
Exploit for CVE-2026-76569
Reflected XSS via search GET Parameter in Phoca Download Ph...
CVE-2026-76569
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...
CVE-2026-76569
Phoca Download extension versions 5.0.0 through 6.1.4 for Joomla contains a reflected XSS flaw in the search GET parameter; attacker-supplied input is reflected unescaped, enabling script execution in a victim's browser. CVSS 4.0 scores it Medium (5.3). No exploitation or patch version is documen...
EUVD-2026-63211
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...
CVE-2026-76569 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...
CVE-2026-76569 Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4...
