XSS in Phoca.cz Phoca Guestbook Extension For Joomla
CVE-2026-65762
Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability.
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Phoca.cz Phoca Guestbook Extension For Joomla — versions 5.0.0-6.1.0, 1.0.0-6.1.0
Weakness classification (CWE)
References
- security@joomla.org (product)