XSS in Phoca.cz Phoca Guestbook Extension For Joomla

CVE-2026-65762

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Guestbook 5.0.0-6.1.0 - Improper validation of user inputs lead to a reflective XSS vulnerability.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References