CVE-2026-23900

The Phoca Maps component (versions 5.0.0-6.0.2 ) used for embedding map information on websites is vulnerable to stored XSS . The issue resides in the maps- and icon rendering logic , where improper neutralization of input during web page generation allows for cross-site scripting. Exploitation d...